CVE-2006-6169
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 3.5%
Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with "C-escape" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt.
Affected products
n/a · n/aReferences
ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.aschttp://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000241.htmlhttp://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.htmlhttps://bugs.g10code.com/gnupg/issue728http://secunia.com/advisories/23094http://secunia.com/advisories/23110http://secunia.com/advisories/23146http://secunia.com/advisories/23161http://secunia.com/advisories/23171http://secunia.com/advisories/23250http://secunia.com/advisories/23269http://secunia.com/advisories/23284