CVE-2014-7287 The key-management component in Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allows remote attackers to trigger unintended content in outbound e-mail messages via a....
MediumCVSS 5.0
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The key-management component in Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allows remote attackers to trigger unintended content in outbound e-mail messages via a crafted key UID value in an inbound e-mail message, as demonstrated by the outbound Subject header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec encryption management server | <= 3.3.2 | No fix listed |
| symantec pgp universal server | <= 3.3.2 | No fix listed |
References
- 72307 third-party-advisory vdb-entry
- 1031673 vdb-entry
- www.symantec.com patch vendor-advisory
- symantec-cve20147287-header-injection(100762) vdb-entry