CVE-2008-1530

GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted duplicate keys that are imported from key servers, which triggers "memory corruption around deduplication of user IDs."

Link	Resource
http://www.ocert.org/advisories/ocert-2008-1.html
https://bugs.g10code.com/gnupg/issue894
https://bugs.gentoo.org/show_bug.cgi?id=214990
http://www.securityfocus.com/bid/28487
http://lists.gnupg.org/pipermail/gnupg-announce/2008q1/000272.html
http://secunia.com/advisories/29568	Vendor Advisory
http://www.vupen.com/english/advisories/2008/1056/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41547

Configuration 1

cpe:2.3:a:gnupg:gnupg:1.4.8:*:*:*:*:*:*:* cpe:2.3:a:gnupg:gnupg:2.0.8:*:*:*:*:*:*:*

---

Published : 2008-03-27 11:44

Updated : 2017-08-08 01:30

---

NVD link : CVE-2008-1530

Mitre link : CVE-2008-1530

No products.

CWE-399