Unscored severity · published Aug 22, 2014
CVE-2014-3436
Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service (CPU and memory…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted encrypted e-mail message that decompresses to a larger size.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ED
Encryption Desktop · Symantec
10.3.0; 10.3.1; 10.3.2 · source: NVD
PD
Pgp Desktop · Symantec
10.0.0; 10.0.1; 10.0.2; 10.0.3; 10.1.0; 10.1.1; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3436
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3436
www.securityfocus.com
http://www.securityfocus.com/bid/69259
www.securitytracker.com
http://www.securitytracker.com/id/1030761
Vendor Advisory
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140821_00
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/95406
More from Encryption Desktop
7.8
CVE-2016-6590
A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7,…
6.5
CVE-2017-6330
Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service (resource consumption) via crafted web requests."
5.7
CVE-2017-13682
In Symantec Encryption Desktop before SED 10.4.1 MP2HF1, a kernel memory leak is a type of resource leak that can occur when a computer program incorrectly manages memory…
4.2
CVE-2017-13679
A denial of service (DoS) attack in Symantec Encryption Desktop before SED 10.4.1 MP2HF1 allows remote attackers to make a particular machine or network resource unavailable to…
–
CVE-2014-3431
Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to…