CVE-2008-1530

CVE-2008-1530 affects GnuPG (gpg) 1.4.8 and 2.0.8. The issue arises when importing crafted duplicate keys (from key servers), triggering memory corruption around deduplication of user IDs. This condition is described as potentially enabling a denial of service (crash) and possibly arbitrary code ...