VULNERABILITY INTELLIGENCE

CVE-2014-1647

CVSS score2.6 LOW
EPSS probability0.71%
CISA KEVNot currently listed
Published2014-04-23
Last modified2026-06-17
CVSS vectorAV:N/AC:H/Au:N/C:N/I:N/A:P

Description

Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform block-data moves, which allows remote attackers to cause a denial of service (read access violation and application crash) via a malformed certificate.

Weakness classification

  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references