10

CVE-2006-6235

A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.

Data is provided by the National Vulnerability Database (NVD)
Gnu ≫ Privacy Guard Version1.2.4
Gnu ≫ Privacy Guard Version1.2.5
Gnu ≫ Privacy Guard Version1.2.6
Gnu ≫ Privacy Guard Version1.2.7
Gnu ≫ Privacy Guard Version1.3.3
Gnu ≫ Privacy Guard Version1.3.4
Gnu ≫ Privacy Guard Version1.4
Gnu ≫ Privacy Guard Version1.4.1
Gnu ≫ Privacy Guard Version1.4.2
Gnu ≫ Privacy Guard Version1.4.2.1
Gnu ≫ Privacy Guard Version1.4.2.2
Gnu ≫ Privacy Guard Version1.4.3
Gnu ≫ Privacy Guard Version1.4.4
Gnu ≫ Privacy Guard Version1.4.5
Gnu ≫ Privacy Guard Version1.9.10
Gnu ≫ Privacy Guard Version1.9.15
Gnu ≫ Privacy Guard Version1.9.20
Gnu ≫ Privacy Guard Version2.0
Gnu ≫ Privacy Guard Version2.0.1
Gpg4win ≫ Gpg4win Version1.0.7
Redhat ≫ Enterprise Linux Version4.0 Editionadvanced_server
Redhat ≫ Enterprise Linux Version4.0 Editionenterprise_server
Redhat ≫ Enterprise Linux Version4.0 Editionworkstation
Redhat ≫ Fedora Core Versioncore_5.0
Redhat ≫ Fedora Core Versioncore6
Redhat ≫ Linux Advanced Workstation Version2.1 Editionitanium_processor
Rpath ≫ Linux Version1
Slackware ≫ Slackware Linux Version11.0
Ubuntu ≫ Ubuntu Linux Version5.10
Ubuntu ≫ Ubuntu Linux Version6.06
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 8.9% 0.922
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C