CVE-2014-3436

Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted encrypted e-mail message that decompresses to a larger size.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
symantecCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
VendorProductVersion
symantecpgp_desktop
10.0.0
symantecpgp_desktop
10.0.1
symantecpgp_desktop
10.0.2
symantecpgp_desktop
10.0.3
symantecpgp_desktop
10.1.0
symantecpgp_desktop
10.1.1
symantecpgp_desktop
10.1.2
symantecpgp_desktop
10.2.0
symantecpgp_desktop
10.2.1
symantecpgp_desktop
10.2.2
symantecencryption_desktop
10.3.0
symantecencryption_desktop
10.3.1
symantecencryption_desktop
10.3.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration