Vulnerability in Apple Mac Os X
CVE-2014-3431
Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to bypass intended restrictions on file reading, modification, creation, and permission changes via unspecified vectors.
EPSS: 0.002 (9.6th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x
- Symantec Encryption_desktop — versions 10.3.0, 10.3.1, 10.3.2
- Symantec Pgp_desktop — versions 10.0.0, 10.0.1, 10.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@symantec.com (vdb-entry, x_refsource_SECTRACK)
- secure@symantec.com (vdb-entry, x_refsource_BID)
- secure@symantec.com (x_refsource_CONFIRM, Vendor Advisory)
- secure@symantec.com (x_refsource_SECUNIA, third-party-advisory)