Denial of Service Vulnerability in Symantec Encryption Desktop and PGP Desktop

CVE-2014-3436 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted encrypted e-mail message that decompresses to a larger size.

Learn more about our Cis Benchmark Audit For Desktop Software.