Description
GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted duplicate keys that are imported from key servers, which triggers "memory corruption around deduplication of user IDs."
Exploits
No known exploits found for this CVE.
Search Exploit-DBReferences
cve@mitre.org
http://secunia.com/advisories/29568cve@mitre.org
http://www.ocert.org/advisories/ocert-2008-1.htmlcve@mitre.org
http://www.securityfocus.com/bid/28487cve@mitre.org
https://bugs.g10code.com/gnupg/issue894cve@mitre.org
https://bugs.gentoo.org/show_bug.cgi?id=214990af854a3a-2127-422b-91ae-364da2661108
http://lists.gnupg.org/pipermail/gnupg-announce/2008q1/000272.htmlaf854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/29568af854a3a-2127-422b-91ae-364da2661108
http://www.ocert.org/advisories/ocert-2008-1.htmlaf854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/28487af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2008/1056/referencesaf854a3a-2127-422b-91ae-364da2661108
https://bugs.g10code.com/gnupg/issue894af854a3a-2127-422b-91ae-364da2661108
https://bugs.gentoo.org/show_bug.cgi?id=214990af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/41547