CVE-2006-6235

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-12-07 · updated 2026-06-16

Description

A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.

Affected products

GNU Privacy Guard: 1.2.4, 1.2.5, 1.2.6, 1.2.7, 1.3.3, 1.3.4 (+13)
Gpg4Win: 1.0.7
Red Hat Enterprise Linux: 4.0
RedHat Enterprise Linux Desktop: 3.0, 4.0
RedHat Fedora Core: core_5.0, core6
RedHat Linux Advanced Workstation: 2.1
Rpath Linux: 1
Slackware Linux: 11.0
Ubuntu Linux: 5.10, 6.06

References

http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000491.html
http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html
http://secunia.com/advisories/23245
http://secunia.com/advisories/23250
http://secunia.com/advisories/23255
http://secunia.com/advisories/23259
http://secunia.com/advisories/23269
http://secunia.com/advisories/23284
http://secunia.com/advisories/23290
http://secunia.com/advisories/23299
http://secunia.com/advisories/23303

Get alerted when CVE-2006-6235 or the next vulnerability affects your stack