Vulnerability in Gpg4win

CVE-2009-3805

gpg2.exe in Gpg4win 2.0.1, as used in KDE Kleopatra 2.0.11, allows remote attackers to cause a denial of service (application crash) via a long certificate signature.

EPSS: 0.014 (69.2th percentile) — read the EPSS interpretation.

Affected products

Gpg4win — versions 2.0.1
Kde-apps Kleopatra — versions 2.0.11
N/a — versions n/a

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)