Unscored severity · published Jun 21, 2014
CVE-2014-3431
Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to…
–
CVSS
0.2%
EPSS
No
On KEV
Description
Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to bypass intended restrictions on file reading, modification, creation, and permission changes via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ED
Encryption Desktop · Symantec
10.3.0; 10.3.1; 10.3.2; 10.3.2 · source: NVD
PD
Pgp Desktop · Symantec
10.0.0; 10.0.1; 10.0.2; 10.0.3; 10.1.0; 10.1.1; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3431
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3431
secunia.com
http://secunia.com/advisories/59421
www.securityfocus.com
http://www.securityfocus.com/bid/68077
www.securitytracker.com
http://www.securitytracker.com/id/1030454
Vendor Advisory
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140620_00
More from Encryption Desktop
7.8
CVE-2016-6590
A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7,…
6.5
CVE-2017-6330
Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service (resource consumption) via crafted web requests."
5.7
CVE-2017-13682
In Symantec Encryption Desktop before SED 10.4.1 MP2HF1, a kernel memory leak is a type of resource leak that can occur when a computer program incorrectly manages memory…
4.2
CVE-2017-13679
A denial of service (DoS) attack in Symantec Encryption Desktop before SED 10.4.1 MP2HF1 allows remote attackers to make a particular machine or network resource unavailable to…
–
CVE-2014-3436
Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service (CPU and memory…