CVE-2013-1610

4 documents4 sources
Severity
6.8MEDIUM
EPSS
0.0%
top 85.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Symantec Encryption DesktopSymantec PGP Desktop
Timeline
PublishedAug 5
Latest updateMay 17

Description

Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Symantec Encryption Desktop 10.3.0 before MP3 allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.1 | Impact: 10.0

Affected Packages2 packages

▶NVDsymantec/pgp_desktop10 versions+9

🔴Vulnerability Details

2
GHSA
GHSA-6jjg-9wjx-3chr: Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10↗2022-05-17
▶
CVEList
CVE-2013-1610: Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10↗2013-08-04
▶

💥Exploits & PoCs

1
Exploit-DB
Quick TFTP Server Pro 2.2 - Denial of Service↗2013-06-07
▶