CVE-2014-1646: Buffer Overflow
Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform memory copies, which allows remote attackers to cause a denial of service (read access violation and application crash) via a malformed certificate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1646?
CVE-2014-1646 is rated as a denial-of-service vulnerability that can cause application crashes.
How do I fix CVE-2014-1646?
To address CVE-2014-1646, update Symantec PGP Desktop or Encryption Desktop Professional to the latest version or apply the appropriate patches.
Which versions are affected by CVE-2014-1646?
CVE-2014-1646 affects Symantec PGP Desktop versions 10.0.x through 10.2.x and Encryption Desktop Professional versions 10.3.x prior to 10.3.2 MP1.
What kind of attack can be executed using CVE-2014-1646?
An attacker can exploit CVE-2014-1646 by sending a malformed certificate to cause a denial of service.
Is CVE-2014-1646 targeted specifically at certain software?
Yes, CVE-2014-1646 specifically targets Symantec's PGP Desktop and Encryption Desktop applications.