Symantec Encryption Desktop 10.x < 10.3.2 MP3 DoS

The version of Symantec Encryption Desktop installed on the remote Mac OS X host is version 10.x prior to 10.3.2 MP3. It is, therefore, affected by a denial of service vulnerability. The flaw is due to a failure to properly limit decompressed file size during the decryption process of a specially...

Symantec Encryption Desktop Installed (Windows)

Binary data symantecencryptiondesktopinstalled.nbin...

Symantec Encryption Desktop Installed (MacOS X)

Binary data macosxsymantecencryptiondesktopinstalled.nbin...

Code injection

Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service CPU and memory consumption via a crafted encrypted e-mail message that decompresses to a larger size...

PT-2014-5321

Name of the Vulnerable Software and Affected Versions Symantec Encryption Desktop versions 10.3.x through 10.3.2 MP2 Symantec PGP Desktop versions 10.0.x through 10.2.x Description The issue allows remote attackers to cause a denial of service, consuming CPU and memory resources, by sending a...

CVE-2014-3436: Undefined Security Weakness

Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service CPU and memory consumption via a crafted encrypted e-mail message that decompresses to a larger size...

Symantec Encryption Desktop Compressed Mail File Denial-of-Service

SUMMARY Certain encryption applications permit compression directly in the message body of an encrypted email file. Symantec Encryption Desktop will attempt decompression and decryption of these specifically formatted incoming email files without properly limiting maximum file size during the...

PT-2014-5317

Name of the Vulnerable Software and Affected Versions Symantec PGP Desktop versions 10.x Symantec Encryption Desktop Professional versions 10.3.x through 10.3.2 MP1 Description The issue allows local users to bypass intended restrictions on file reading, modification, creation, and permission...

Symantec Encryption Desktop for OS X World-Writable Files Insecure File Handling

SUMMARY Symantecs Encryption Desktop for OS X installs some temporary files with world-writable attributes during installation. In a multi-user environment, a malicious user could manipulate these world-writable files to read and write files or create files with another users permissions. AFFECTE...

CVE-2014-1646: Improper Restriction of Operations within the Bounds of a Memory Buffer

Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform memory copies, which allows remote attackers to cause a denial of service read access violation and application crash via a malformed certificate...

PT-2014-4275

Name of the Vulnerable Software and Affected Versions Symantec PGP Desktop versions 10.0.x through 10.2.x Symantec Encryption Desktop Professional versions 10.3.x before 10.3.2 MP1 Description The issue is related to improper memory copy operations, which can be exploited by remote attackers usin...

PT-2014-4276

Name of the Vulnerable Software and Affected Versions Symantec PGP Desktop versions 10.0.x through 10.2.x Symantec Encryption Desktop Professional versions 10.3.x before 10.3.2 MP1 Description The issue is related to the improper performance of block-data moves, which can be exploited by remote...

Symantec Encryption Server Detection

Binary data symantecencryptionserverdetect.nbin...

Symantec Encryption Management Server < 3.3.2 Information Disclosure

The version of Symantec Encryption Management Server listening on the remote host is earlier than version 3.3.2. It is, therefore, affected by an information disclosure vulnerability due to a flaw in the Web Email Protection component. A remote, authenticated attacker could potentially exploit th...

CVE-2014-1643

The Web Email Protection component in Symantec Encryption Management Server aka PGP Universal Server before 3.3.2 allows remote authenticated users to read the stored outbound e-mail messages of arbitrary users via a modified URL...

Code injection

The Web Email Protection component in Symantec Encryption Management Server aka PGP Universal Server before 3.3.2 allows remote authenticated users to read the stored outbound e-mail messages of arbitrary users via a modified URL...

CVE-2014-1643: Undefined Security Weakness

The Web Email Protection component in Symantec Encryption Management Server aka PGP Universal Server before 3.3.2 allows remote authenticated users to read the stored outbound e-mail messages of arbitrary users via a modified URL...

PT-2014-4272

Name of the Vulnerable Software and Affected Versions Symantec Encryption Management Server versions prior to 3.3.2 Description The issue allows remote authenticated users to read stored outbound e-mail messages of arbitrary users via a modified URL. Recommendations For versions prior to 3.3.2,...

Symantec Encryption Management Server Web Email Protection View User’s Email

SUMMARY Symantec Encryption Management Server was susceptible to an authorized/authenticated web console user being able to view any other users stored outbound emails. The issue is in the Web Email Protection component not sufficiently restricting authorized user content access. This could allow...

Symantec Encryption Desktop Unquoted Search Path

The version of Symantec Encryption Desktop or Symantec PGP Desktop installed on the remote host has a service that uses an unquoted search path that contains at least one whitespace. A local attacker could gain elevated privileges by inserting an executable file in the path of the affected servic...