Symantec Encryption Desktop Unquoted Search Path

SUMMARY Symantec PGP and Symantec Encryption Desktop client has an unquoted search path in RDDService. This could provide a non-privileged local user the ability to successfully insert arbitrary code in the root path. AFFECTED PRODUCTS Product | Version | Build | Solutions ---|---|---|--- Symante...

Symantec Encryption Desktop Multiple DoS Vulnerabilities

The remote host has a version of Symantec Encryption Desktop formerly PGP Desktop installed that is affected by two denial of service vulnerabilities due to improper handling of data when parsing specifically formatted certificates. An attacker could potentially exploit this vulnerability by...

Symantec Encryption Desktop Detection

The remote host has Symantec Encryption Desktop installed formerly PGP Desktop, a desktop encryption application. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64852; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

Symantec Encryption Desktop Local Access Elevation of Privilege Vulnerabilities

The remote host has a version of Symantec Encryption Desktop formerly PGP Desktop installed that is affected by two privilege escalation vulnerabilities that can be triggered by exploiting a buffer overflow or integer overflow flaw in 'pgpwded.sys'. By running a specially crafted program, a local...

PGP Desktop PGPserv Crafted Data Object Arbitrary Code Execution

The version of PGP Desktop installed on the remote host reportedly can allow a remote, authenticated user to execute arbitrary code on the affected host with LOCAL SYSTEM privileges. The issue arises because the software operates a service named 'PGPServ' or 'PGPsdkServ' that exposes a named pipe...