Buffer overflow in Symantec Encryption Desktop
CVE-2014-1647
Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform block-data moves, which allows remote attackers to cause a denial of service (read access violation and application crash) via a malformed certificate.
Vulnerability class: Buffer Overflow
EPSS: 0.007 (50.1th percentile) — read the EPSS interpretation.
Affected products
- Symantec Encryption_desktop — versions 10.3.0, 10.3.1, 10.3.2
- Symantec Pgp_desktop — versions 10.0.0, 10.0.1, 10.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@symantec.com (vdb-entry, x_refsource_BID)
- secure@symantec.com (x_refsource_CONFIRM, Vendor Advisory)