CVE Feed

    Dashboard / CVE / CVE-2014-1647

    CVE-2014-1647

    Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform block-data moves, which allows remote attackers to cause a denial of service (read access violation and application crash) via a malformed certificate.

    Published:Apr 23, 2014
    Last Modified:Apr 12, 2025
    EPS:Apr 23, 2014
    EPSS Score:0.00318
    CVSS Score:2.6

    Affected Products

    Vendor
    Symantec
    Product
    Encryption Desktop
    Vendor
    Symantec
    Product
    Pgp Desktop

    Exploits

    No exploit reference

    Related CVEs

    CVE-2016-6590 (CVSS 7.8) — A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Managem…
    CVE-2017-13682 (CVSS 5.7) — In Symantec Encryption Desktop before SED 10.4.1 MP2HF1, a kernel memory leak is a type of resource leak that …
    CVE-2017-13679 (CVSS 4.2) — A denial of service (DoS) attack in Symantec Encryption Desktop before SED 10.4.1 MP2HF1 allows remote attacke…
    CVE-2017-6330 (CVSS 6.5) — Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service (reso…
    CVE-2014-3436 (CVSS 5) — Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows r…
    CVE-2014-3431 (CVSS 4.3) — Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-wr…
    CVE-2014-1646 (CVSS 2.6) — Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not…
    CVE-2013-1610 (CVSS 6.8) — Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Sym…
    CVE-2012-4351 (CVSS 6.9) — Integer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 allows l…
    CVE-2012-6533 (CVSS 4.4) — Buffer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 on Window…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High