CVE-2006-3746
gnupg gnupg: no CVSS score yet. EPSS 7.2% chance of exploitation in the next 30 days.
Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial of service (segmentation fault) via a crafted message.
- EPSS
- 7.2% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- gnupg:gnupg
References
- ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P
- http://bugs.debian.org/cgi-bin/bugreport.cgi/gnupg.CVE-2006-3746.diff?bug=381204%3Bmsg=15%3Batt=1
- http://issues.rpath.com/browse/RPL-560
- http://lists.immunitysec.com/pipermail/dailydave/2006-July/003354.html
- http://lwn.net/Alerts/194228/