Vulnerability in Symantec Encryption Desktop
CVE-2014-3436
Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted encrypted e-mail message that decompresses to a larger size.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.011 (61.5th percentile) — read the EPSS interpretation.
Affected products
- Symantec Encryption_desktop — versions 10.3.0, 10.3.1, 10.3.2
- Symantec Pgp_desktop — versions 10.0.0, 10.0.1, 10.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@symantec.com (vdb-entry, x_refsource_XF)
- secure@symantec.com (vdb-entry, x_refsource_SECTRACK)
- secure@symantec.com (vdb-entry, x_refsource_BID)
- secure@symantec.com (x_refsource_CONFIRM, Vendor Advisory)