SuSE 11 / 11.1 Security Update : gpg2 (SAT Patch Numbers 2820 / 2822)

This update fixes a vulnerability of GnuPG2 to arbitrary code execution by context-dependent attackers due to reusing a freed pointer when verifying a signature or importing a certificate with many 'Subject Alternate Names'. CVE-2010-2547 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 10 Security Update : gpg2 (ZYPP Patch Number 7107)

This update fixes a vulnerability of GnuPG2 to arbitrary code execution by context-dependent attackers due to reusing a freed pointer when verifying a signature or importing a certificate with many 'Subject Alternate Names'. CVE-2010-2547 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[SECURITY] Fedora 12 Update: gnupg2-2.0.13-2.fc12

GnuPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440 and the S/MIME standard as described...

openSUSE Security Update : gpg2 (openSUSE-SU-2010:0479-1)

GnuPG2 was vulnerable to arbitrary code execution by context-dependent attackers because of reusing a freed pointer when verifying a signature or importing a certificate with many 'Subject Alternate Names'. CVE-2010-2547 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

openSUSE Security Update : gpg2 (openSUSE-SU-2010:0479-1)

GnuPG2 was vulnerable to arbitrary code execution by context-dependent attackers because of reusing a freed pointer when verifying a signature or importing a certificate with many 'Subject Alternate Names'. CVE-2010-2547 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

Gpg4Win Denial Of Service Vulnerability

Gpg4Win, as used in KDE Kleopatra is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Code injection

gpg2.exe in Gpg4win 2.0.1, as used in KDE Kleopatra 2.0.11, allows remote attackers to cause a denial of service application crash via a long certificate signature...

GPG2/Kleopatra 2.0.11 malformed certificate PoC

No description provided by source. !/usr/bin/env python GPG2/Kleopatra 2.0.11 - Malformed Certificate Crash PoC Note: Part of the GPG4Win Package v2.0.1 Found By: DrIDE Tested On: 7RC, XPSP3 Usage: Import the Cert into Kleopatra, GPG2.exe Crashes Seems to only check for the presense of this...

GPG2/Kleopatra 2.0.11 - Malformed Certificate

!/usr/bin/env python GPG2/Kleopatra 2.0.11 - Malformed Certificate Crash PoC Note: Part of the GPG4Win Package v2.0.1 Found By: DrIDE Tested On: 7RC, XPSP3 Usage: Import the Cert into Kleopatra, GPG2.exe Crashes Seems to only check for the presense of this signature cert =...

GPG2Kleopatra 2.0.11 - Malformed Certificate

GPG2Kleopatra 2.0.11 - Malformed Certificate !/usr/bin/env python GPG2/Kleopatra 2.0.11 - Malformed Certificate Crash PoC Note: Part of the GPG4Win Package v2.0.1 Found By: DrIDE Tested On: 7RC, XPSP3 Usage: Import the Cert into Kleopatra, GPG2.exe Crashes Seems to only check for the presense of...

GPG2/Kleopatra 2.0.11 malformed certificate PoC

Exploit for unknown platform in category local exploits =============================================== GPG2/Kleopatra 2.0.11 malformed certificate PoC =============================================== Title: GPG2/Kleopatra 2.0.11 malformed certificate PoC CVE-ID: OSVDB-ID: Author: DrIDE Published:...

GPG2/Kleopatra 2.0.11 Malformed Certificate Crash

!/usr/bin/env python GPG2/Kleopatra 2.0.11 - Malformed Certificate Crash PoC Note: Part of the GPG4Win Package v2.0.1 Found By: DrIDE Tested On: 7RC, XPSP3 Usage: Import the Cert into Kleopatra, GPG2.exe Crashes Seems to only check for the presense of this signature cert =...

SuSE 10 Security Update : gpg2 (ZYPP Patch Number 2354)

Specially crafted files could overflow a buffer when gpg2 was used in interactive mode. CVE-2006-6169 - Specially crafted files could modify a function pointer and execute code this way. CVE-2006-6235 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

SuSE 10 Security Update : gpg2 (ZYPP Patch Number 1834)

It is possible to crash denial of service the GNU Privacy Guard gpg by supplying a specifically crafted message specifying a very large UID, which leads to an out of memory situation or an integer overflow. It is unclear if this problem can be exploited to execute code. This issue is tracked by t...

openSUSE 10 Security Update : gpg2 (gpg2-1956)

This update of gpg2 fixes an segmentation fault when using the--no-armor option. This failure leads to a denial-of-service attack and may be used execute arbitrary code. CVE-2006-3746 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE 10 Security Update : gpg2 (gpg2-2352)

Specially crafted files could overflow a buffer when gpg2 was used in interactive mode CVE-2006-6169. - Specially crafted files could modify a function pointer and execute code this way CVE-2006-6235. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

CVE-2005-2023

The sendpinentryenvironment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options, which can prevent pinentry from being found and causes S/MIME signing to fail...

CVE-2005-2023

The sendpinentryenvironment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options, which can prevent pinentry from being found and causes S/MIME signing to fail...

CVE-2005-2023

Technical details about CVE-2005-2023 are not publicly provided in the supplied documents; monitor for updates.

CVE-2005-2023

The sendpinentryenvironment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options, which can prevent pinentry from being found and causes S/MIME signing to fail...