CVE-2013-1610: Medium severity symantec encryption desktop vulnerability
Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Symantec Encryption Desktop 10.3.0 before MP3 allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1610?
CVE-2013-1610 has been categorized as a high-severity vulnerability due to the potential for privilege escalation.
How do I fix CVE-2013-1610?
To mitigate CVE-2013-1610, users should update to the latest version of Symantec Encryption Desktop or PGP Desktop that addresses this vulnerability.
What versions are affected by CVE-2013-1610?
CVE-2013-1610 affects Symantec PGP Desktop versions 10.0.x to 10.2.x and Symantec Encryption Desktop version 10.3.0 before MP3.
What type of vulnerability is CVE-2013-1610?
CVE-2013-1610 is an unquoted Windows search path vulnerability that allows local users to gain elevated privileges.
Is CVE-2013-1610 a local or remote exploit?
CVE-2013-1610 is a local exploit, meaning it requires local access to the affected system to be successfully executed.