Show filters
136 Total Results
Displaying 111-120 of 136
Sort by:
Attacker Value
Unknown
CVE-2014-8518
Disclosure Date: October 29, 2014 (last updated October 05, 2023)
The (1) Removable Media and (2) CD and DVD encryption offsite access options (formerly Endpoint Encryption for Removable Media or EERM) in McAfee File and Removable Media Protection (FRP) 4.3.0.x, and Endpoint Encryption for Files and Folders (EEFF) 3.2.x through 4.2.x, uses a hard-coded salt, which makes it easier for local users to obtain passwords via a brute force attack.
0
Attacker Value
Unknown
CVE-2014-3436
Disclosure Date: August 22, 2014 (last updated October 05, 2023)
Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted encrypted e-mail message that decompresses to a larger size.
0
Attacker Value
Unknown
CVE-2014-3431
Disclosure Date: June 21, 2014 (last updated October 05, 2023)
Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to bypass intended restrictions on file reading, modification, creation, and permission changes via unspecified vectors.
0
Attacker Value
Unknown
CVE-2014-1647
Disclosure Date: April 23, 2014 (last updated October 05, 2023)
Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform block-data moves, which allows remote attackers to cause a denial of service (read access violation and application crash) via a malformed certificate.
0
Attacker Value
Unknown
CVE-2014-1646
Disclosure Date: April 23, 2014 (last updated October 05, 2023)
Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform memory copies, which allows remote attackers to cause a denial of service (read access violation and application crash) via a malformed certificate.
0
Attacker Value
Unknown
CVE-2014-1643
Disclosure Date: February 07, 2014 (last updated October 05, 2023)
The Web Email Protection component in Symantec Encryption Management Server (aka PGP Universal Server) before 3.3.2 allows remote authenticated users to read the stored outbound e-mail messages of arbitrary users via a modified URL.
0
Attacker Value
Unknown
CVE-2013-1610
Disclosure Date: August 05, 2013 (last updated October 05, 2023)
Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Symantec Encryption Desktop 10.3.0 before MP3 allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory.
0
Attacker Value
Unknown
CVE-2013-4674
Disclosure Date: July 31, 2013 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the Web Email Protection component in Symantec Encryption Management Server (formerly Symantec PGP Universal Server) before 3.3.0 MP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted encrypted e-mail attachment.
0
Attacker Value
Unknown
CVE-2012-4351
Disclosure Date: February 18, 2013 (last updated October 05, 2023)
Integer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 allows local users to gain privileges via a crafted application.
0
Attacker Value
Unknown
CVE-2012-6533
Disclosure Date: February 18, 2013 (last updated October 05, 2023)
Buffer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 on Windows XP and Server 2003 allows local users to gain privileges via a crafted application.
0
