CVE Feed

    Dashboard / CVE / CVE-2014-3436

    CVE-2014-3436

    Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted encrypted e-mail message that decompresses to a larger size.

    Published:Aug 22, 2014
    Last Modified:Apr 12, 2025
    EPS:Aug 22, 2014
    EPSS Score:0.00405
    CVSS Score:5

    Affected Products

    Vendor
    Symantec
    Product
    Encryption Desktop
    Vendor
    Symantec
    Product
    Pgp Desktop

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2016-6590 (CVSS 7.8) — A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Managem…
    CVE-2017-13682 (CVSS 5.7) — In Symantec Encryption Desktop before SED 10.4.1 MP2HF1, a kernel memory leak is a type of resource leak that …
    CVE-2017-13679 (CVSS 4.2) — A denial of service (DoS) attack in Symantec Encryption Desktop before SED 10.4.1 MP2HF1 allows remote attacke…
    CVE-2017-6330 (CVSS 6.5) — Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service (reso…
    CVE-2014-3431 (CVSS 4.3) — Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-wr…
    CVE-2014-1647 (CVSS 2.6) — Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not…
    CVE-2014-1646 (CVSS 2.6) — Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not…
    CVE-2013-1610 (CVSS 6.8) — Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Sym…
    CVE-2012-4351 (CVSS 6.9) — Integer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 allows l…
    CVE-2012-6533 (CVSS 4.4) — Buffer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 on Window…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High