Vulnerability in Symantec Encryption Desktop
CVE-2013-1610
Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Symantec Encryption Desktop 10.3.0 before MP3 allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory.
EPSS: 0.003 (22.6th percentile) — read the EPSS interpretation.
Affected products
- Symantec Encryption_desktop — versions 10.3.0
- Symantec Pgp_desktop — versions 10.0.0, 10.0.1, 10.0.2
- N/a — versions n/a
References
- secure@symantec.com (vdb-entry, x_refsource_BID)
- secure@symantec.com (x_refsource_CONFIRM)