critical10.0
CVE-2006-6235
A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via cr…
Impact
A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Privacy Guard | Versions 1.2.4, 1.2.5, 1.2.6, 1.2.7, 1.3.3, 1.3.4 |
| Gpg4win | Gpg4win | Version 1.0.7 |
| Redhat | Enterprise Linux | Version 4.0 |
| Redhat | Enterprise Linux Desktop | Versions 3.0, 4.0 |
| Redhat | Fedora Core | Versions core_5.0, core6 |
| Redhat | Linux Advanced Workstation | Version 2.1 |
| Rpath | Linux | Version 1 |
| Slackware | Slackware Linux | Version 11.0 |
| Ubuntu | Ubuntu Linux | Versions 5.10, 6.06 |
References
- NVD record
- CVE.org record
- http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000491.html
- http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html
- http://secunia.com/advisories/23245
- http://secunia.com/advisories/23250
- http://secunia.com/advisories/23255
- http://secunia.com/advisories/23259
- http://secunia.com/advisories/23269
- http://secunia.com/advisories/23284
- http://secunia.com/advisories/23290
- http://secunia.com/advisories/23299
- http://secunia.com/advisories/23303
- http://secunia.com/advisories/23329
- http://secunia.com/advisories/23335
- http://secunia.com/advisories/23513
- http://secunia.com/advisories/24047
- http://security.gentoo.org/glsa/glsa-200612-03.xml
- http://securitytracker.com/id?1017349
- http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm
- http://www.debian.org/security/2006/dsa-1231
- http://www.kb.cert.org/vuls/id/427009
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:228
- http://www.novell.com/linux/security/advisories/2006_28_sr.html
- http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html
- http://www.redhat.com/support/errata/RHSA-2006-0754.html
- http://www.securityfocus.com/archive/1/453664/100/0/threaded