4.3

CVE-2014-3431

Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to bypass intended restrictions on file reading, modification, creation, and permission changes via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Symantec ≫ Encryption Desktop Version 10.3.0 SwEdition professional
   Apple ≫ macOS X
Symantec ≫ Encryption Desktop Version 10.3.1 SwEdition professional
   Apple ≫ macOS X
Symantec ≫ Encryption Desktop Version 10.3.2 Update - SwEdition professional
   Apple ≫ macOS X
Symantec ≫ Encryption Desktop Version 10.3.2 Update mp1 SwEdition professional
   Apple ≫ macOS X
Symantec ≫ Pgp Desktop Version 10.0.0
   Apple ≫ macOS X
Symantec ≫ Pgp Desktop Version 10.0.1
   Apple ≫ macOS X
Symantec ≫ Pgp Desktop Version 10.0.2
   Apple ≫ macOS X
Symantec ≫ Pgp Desktop Version 10.0.3
   Apple ≫ macOS X
Symantec ≫ Pgp Desktop Version 10.1.0
   Apple ≫ macOS X
Symantec ≫ Pgp Desktop Version 10.1.1
   Apple ≫ macOS X
Symantec ≫ Pgp Desktop Version 10.1.2
   Apple ≫ macOS X
Symantec ≫ Pgp Desktop Version 10.2.0
   Apple ≫ macOS X
Symantec ≫ Pgp Desktop Version 10.2.1
   Apple ≫ macOS X
Symantec ≫ Pgp Desktop Version 10.2.2
   Apple ≫ macOS X
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.093
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 3.1 6.4
AV:L/AC:L/Au:S/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/59421
http://www.securityfocus.com/bid/68077
http://www.securitytracker.com/id/1030454
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140620_00
Vendor Advisory