PT-2015-3922

Name of the Vulnerable Software and Affected Versions Symantec PGP Universal Server and Encryption Management Server versions prior to 3.3.2 MP7 Description The issue allows remote attackers to trigger unintended content in outbound e-mail messages via a crafted key UID value in an inbound e-mail...

CVE-2014-7287: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The key-management component in Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allows remote attackers to trigger unintended content in outbound e-mail messages via a crafted key UID value in an inbound e-mail message, as demonstrated by the outbound Subject heade...