CVE-2006-3746

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-07-28 · updated 2026-06-16

Description

Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial of service (segmentation fault) via a crafted message.

Affected products

GnuPG: 1.4.4

References

http://bugs.debian.org/cgi-bin/bugreport.cgi/gnupg.CVE-2006-3746.diff?bug=381204%3Bmsg=15%3Batt=1
http://issues.rpath.com/browse/RPL-560
http://lists.immunitysec.com/pipermail/dailydave/2006-July/003354.html
http://lwn.net/Alerts/194228/
http://secunia.com/advisories/21297
http://secunia.com/advisories/21300
http://secunia.com/advisories/21306
http://secunia.com/advisories/21326
http://secunia.com/advisories/21329
http://secunia.com/advisories/21333
http://secunia.com/advisories/21346

Get alerted when CVE-2006-3746 or the next vulnerability affects your stack