Symantec Encryption Desktop CVE-2017-13682 Denial-of-Service Vulnerability

Bugtraq ID:	101497
Class:	Design Error
CVE:	CVE-2017-13682
Remote:	Yes
Local:	Yes
Published:	Oct 23 2017 12:00AM
Updated:	Oct 23 2017 12:00AM
Credit:	Kyriakos Economou (@kyREcon) on behalf of Nettitude
Vulnerable:	Symantec Encryption Desktop 10.4.1 MP1 Symantec Encryption Desktop 10.3 Symantec Encryption Desktop 10.4.1 MP2 Symantec Encryption Desktop 10.3.2 MP3 Symantec Encryption Desktop 10.3.2 Symantec Encryption Desktop 10.3.1 Symantec Encryption Desktop 10.3.0 MP3 Symantec Encryption Desktop 10.3.0 MP2
Not Vulnerable:	Symantec Encryption Desktop 10.4.1 MP2HF1

Symantec Encryption Desktop CVE-2017-13682 Denial-of-Service Vulnerability

Symantec Encryption Desktop is prone to a denial-of-service vulnerability.

An attacker may leverage this issue to cause denial-of-service conditions.

Versions prior to Symantec Encryption Desktop 10.4.1 MP2HF1 are vulnerable.

Symantec Encryption Desktop CVE-2017-13682 Denial-of-Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Symantec Encryption Desktop CVE-2017-13682 Denial-of-Service Vulnerability

References:

• Symantec Encryption Desktop Product Page (Symantec)
  
• Symantec Homepage (Symantec)
  
• Security Advisories Relating to Symantec Products - Symantec Endpoint Encryption (Symantec)