CVE-2014-3436

2014-08-2201:55:00

CWE-310

[email protected]

web.nvd.nist.gov

symantec

encryption

desktop

pgp

cve-2014-3436

vulnerability

denial of service

nvd

6.7 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

53.4%

JSON

Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted encrypted e-mail message that decompresses to a larger size.

CPENameOperatorVersion
symantec:pgp_desktopsymantec pgp desktopeq10.2.2
symantec:pgp_desktopsymantec pgp desktopeq10.1.0
symantec:pgp_desktopsymantec pgp desktopeq10.2.0
symantec:pgp_desktopsymantec pgp desktopeq10.1.1
symantec:pgp_desktopsymantec pgp desktopeq10.0.0
symantec:pgp_desktopsymantec pgp desktopeq10.0.2
symantec:pgp_desktopsymantec pgp desktopeq10.0.3
symantec:pgp_desktopsymantec pgp desktopeq10.1.2
symantec:pgp_desktopsymantec pgp desktopeq10.0.1
symantec:pgp_desktopsymantec pgp desktopeq10.2.1

CPE	Name	Operator	Version
symantec:pgp_desktop	symantec pgp desktop	eq	10.2.2
symantec:pgp_desktop	symantec pgp desktop	eq	10.1.0
symantec:pgp_desktop	symantec pgp desktop	eq	10.2.0
symantec:pgp_desktop	symantec pgp desktop	eq	10.1.1
symantec:pgp_desktop	symantec pgp desktop	eq	10.0.0
symantec:pgp_desktop	symantec pgp desktop	eq	10.0.2
symantec:pgp_desktop	symantec pgp desktop	eq	10.0.3
symantec:pgp_desktop	symantec pgp desktop	eq	10.1.2
symantec:pgp_desktop	symantec pgp desktop	eq	10.0.1
symantec:pgp_desktop	symantec pgp desktop	eq	10.2.1