| Package | Affected versions | Patched versions |
|---|---|---|
| encryption desktop | = 10.3.0= 10.3.1= 10.3.2 | |
| pgp desktop | = 10.0.0= 10.0.1= 10.0.2= 10.0.3= 10.1.0= 10.1.1= 10.1.2= 10.2.0= 10.2.1= 10.2.2 |
Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform block-data moves, which allows remote attackers to cause a denial of service (read access violation and application crash) via a malformed certificate.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free