CVE-2014-3431: Medium severity symantec encryption desktop vulnerability
Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to bypass intended restrictions on file reading, modification, creation, and permission changes via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3431?
CVE-2014-3431 is classified as having a moderate severity level due to its potential impact on file permissions.
How do I fix CVE-2014-3431?
To fix CVE-2014-3431, update Symantec PGP Desktop or Encryption Desktop Professional to version 10.3.2 MP2 or later.
What problems does CVE-2014-3431 cause?
CVE-2014-3431 allows local users to bypass intended restrictions, leading to unauthorized modification and access to sensitive files.
Which versions of Symantec products are affected by CVE-2014-3431?
CVE-2014-3431 affects Symantec PGP Desktop 10.x and Encryption Desktop Professional 10.3.x prior to version 10.3.2 MP2.
Is my macOS affected by CVE-2014-3431?
No, macOS itself is not vulnerable to CVE-2014-3431, but the affected Symantec software running on it is.