← Database

CVE-2006-6235

CRITICAL CVSS: 10.0 Published: 2006-12-07 Modified: 2026-06-16

Description

A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.

Affected Platforms

Redhat Enterprise LinuxRpath LinuxRedhat Enterprise Linux DesktopSlackware Slackware LinuxGpg4Win Gpg4WinRedhat Linux Advanced WorkstationRedhat Fedora CoreUbuntu Ubuntu LinuxGnu Privacy Guard

Weakness Type

NVD-CWE-Other

References