CVE-2014-3431 Information

Description

Symantec PGP Desktop 10.x and Encryption Desktop Professional 10.3.x before 10.3.2 MP2 on OS X uses world-writable permissions for temporary files which allows local users to bypass intended restrictions on file reading modification creation and permission changes via unspecified vectors.

Reference

http://secunia.com/advisories/59421 http://www.securityfocus.com/bid/68077 http://www.securitytracker.com/id/1030454 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140620_00