CVE-2006-3746

MEDIO 5.0CVE-2006-3746 · Published 28/07/2006 · updated 16/06/2026

En resumen

CVE-2006-3746 es una vulnerabilidad MEDIO (CVSS 5.0) que afecta a gnupg (gnupg).
Probabilidad de explotación en los próximos 30 días (EPSS): 7.2%, mayor que el 94.3% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
gnupg gnupg	`= 1.4.4`	No fix yet

Description

Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial of service (segmentation fault) via a crafted message.

References

patches.sgi.com/support/free/security/advisories/20060801-01-P
bugs.debian.org/cgi-bin/bugreport.cgi/gnupg.CVE-2006-3746.diff
issues.rpath.com/browse/RPL-560
lists.immunitysec.com/pipermail/dailydave/2006-July/003354.html · Exploit
lwn.net/Alerts/194228
secunia.com/advisories/21297
secunia.com/advisories/21300
secunia.com/advisories/21306
secunia.com/advisories/21326
secunia.com/advisories/21329
secunia.com/advisories/21333
secunia.com/advisories/21346
secunia.com/advisories/21351
secunia.com/advisories/21378
secunia.com/advisories/21467
secunia.com/advisories/21522

Más vulnerabilidades de gnupg

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free