CVEvulnerability

CVE-2013-1610

6.8 MEDIUM Published 2013-08-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-08-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:L/AC:L/Au:S/C:C/I:C/A:C

Description

Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Symantec Encryption Desktop 10.3.0 before MP3 allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory.

Affected configurations

• symantec encryption desktop 10.3.0 • symantec pgp desktop 10.0.0 • symantec pgp desktop 10.0.1 • symantec pgp desktop 10.0.2 • symantec pgp desktop 10.0.3 • symantec pgp desktop 10.1.0 • symantec pgp desktop 10.1.1 • symantec pgp desktop 10.1.2 • symantec pgp desktop 10.2.0 • symantec pgp desktop 10.2.1 • symantec pgp desktop 10.2.2

References