CVE-2014-1647

Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform block-data moves, which allows remote attackers to cause a denial of service (read access violation and application crash) via a malformed certificate.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:symantec:pgp_desktop:10.2.2:*:*:*:*:*:*:*
cpe:2.3:a:symantec:pgp_desktop:10.1.2:*:*:*:*:*:*:*
cpe:2.3:a:symantec:pgp_desktop:10.2.1:*:*:*:*:*:*:*
cpe:2.3:a:symantec:pgp_desktop:10.0.1:*:*:*:*:*:*:*
cpe:2.3:a:symantec:pgp_desktop:10.0.2:*:*:*:*:*:*:*
cpe:2.3:a:symantec:pgp_desktop:10.0.3:*:*:*:*:*:*:*
cpe:2.3:a:symantec:pgp_desktop:10.1.0:*:*:*:*:*:*:*
cpe:2.3:a:symantec:pgp_desktop:10.0.0:*:*:*:*:*:*:*
cpe:2.3:a:symantec:pgp_desktop:10.1.1:*:*:*:*:*:*:*
cpe:2.3:a:symantec:pgp_desktop:10.2.0:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:symantec:encryption_desktop:10.3.0:*:*:*:professional:*:*:*
cpe:2.3:a:symantec:encryption_desktop:10.3.1:*:*:*:professional:*:*:*
cpe:2.3:a:symantec:encryption_desktop:10.3.2:-:*:*:professional:*:*:*

Information

Published : 2014-04-23 12:55

Updated : 2014-04-24 11:06


NVD link : CVE-2014-1647

Mitre link : CVE-2014-1647


JSON object : View

CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Advertisement

dedicated server usa

Products Affected

symantec

  • pgp_desktop
  • encryption_desktop