CVE-2013-1610

Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Symantec Encryption Desktop 10.3.0 before MP3 allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory.

Score

CVSS 2.0 6.8 Medium

Status

Modified - secure@symantec.com

Published

2013-08-05

Last modified

2024-09-17

Affected products

• Encryption Desktop (Symantec)
• Pgp Desktop (Symantec)

References

• http://www.securityfocus.com/bid/61489
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=…