CVE-2014-3436: Medium severity pgp vulnerability
Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted encrypted e-mail message that decompresses to a larger size.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3436?
CVE-2014-3436 is rated as a medium severity vulnerability due to its potential to cause denial of service by consuming CPU and memory.
How do I fix CVE-2014-3436?
To mitigate CVE-2014-3436, users should upgrade to Symantec Encryption Desktop version 10.3.2 MP3 or later, or to PGP Desktop version 10.3.2 or later.
What types of attacks can exploit CVE-2014-3436?
CVE-2014-3436 can be exploited through sending crafted encrypted email messages that decompress to a larger size, leading to denial of service.
Which software versions are affected by CVE-2014-3436?
CVE-2014-3436 affects Symantec Encryption Desktop versions 10.3.x prior to 10.3.2 MP3 and PGP Desktop versions 10.0.x through 10.2.x.
What are the symptoms of an exploit of CVE-2014-3436?
Symptoms of an exploit of CVE-2014-3436 include significant system slowdowns or crashes due to high CPU and memory consumption.