Pgp Desktop
Vendor:
First CVE: Feb 18, 2013 · Active for 13 years
7
Total CVEs
More Total CVEs than 85% of tracked products
3.5
Avg CVEs / Year
Higher CVE frequency than 84% of tracked products
4.7
Avg CVSS
Higher Avg CVSS than 7% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Pgp Desktop over time
Volume of CVEsAvg CVSS Base Score
First CVE
Feb 18, 2013
13 years ago
Most Recent CVE
Aug 22, 2014
4,357 days ago
CVE Severity & Scoring
Pgp Desktop7 CVEs
29%
71%
All CVEs352,785 CVEs
45%
40%
11%
LowMedium
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown7 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown7 (100.0%)
User Interaction
None0 (0.0%)
Unknown7 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown7 (100.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2012-6533MEDIUM Buffer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 on Windows XP and Server 2003 allows local users to gain privileges via a craft | Feb 18, 2013 | 4.4 | 26 | NO | YES |
CVE-2012-4351MEDIUM Integer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 allows local users to gain privileges via a crafted application. | Feb 18, 2013 | 6.9 | 23 | NO | NO |
CVE-2013-1610MEDIUM Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Symantec Encryption Desktop 10.3.0 before MP3 allows local users to gain | Aug 5, 2013 | 6.8 | 18 | NO | NO |
CVE-2014-3436MEDIUM Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service (CPU and memory consumpti | Aug 22, 2014 | 5.0 | 15 | NO | NO |
CVE-2014-3431MEDIUM Symantec PGP Desktop 10.x, and Encryption Desktop Professional 10.3.x before 10.3.2 MP2, on OS X uses world-writable permissions for temporary files, which allows local users to by | Jun 21, 2014 | 4.3 | 14 | NO | NO |
Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform block-data moves, which allows remote attackers to c | Apr 23, 2014 | 2.6 | 14 | NO | NO |
Symantec PGP Desktop 10.0.x through 10.2.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP1 do not properly perform memory copies, which allows remote attackers to caus | Apr 23, 2014 | 2.6 | 14 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
14.3% of CVEs· 87th percentile
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Pgp Desktop
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 10.2.2 | 5 | 4.3 | 0.6% | 0 | 0 |
| 10.2.1 | 7 | 4.7 | 0.5% | 0 | 1 |
| 10.2.0 | 7 | 4.7 | 0.5% | 0 | 1 |
| 10.1.2 | 7 | 4.7 | 0.5% | 0 | 1 |
| 10.1.1 | 7 | 4.7 | 0.5% | 0 | 1 |
| 10.1.0 | 7 | 4.7 | 0.5% | 0 | 1 |
| 10.0.3 | 7 | 4.7 | 0.5% | 0 | 1 |
| 10.0.2 | 7 | 4.7 | 0.5% | 0 | 1 |
| 10.0.1 | 7 | 4.7 | 0.5% | 0 | 1 |
| 10.0.0 | 7 | 4.7 | 0.5% | 0 | 1 |