CVE Feed

    Dashboard / CVE / CVE-2009-3805

    CVE-2009-3805

    gpg2.exe in Gpg4win 2.0.1, as used in KDE Kleopatra 2.0.11, allows remote attackers to cause a denial of service (application crash) via a long certificate signature.

    Published:Oct 27, 2009
    Last Modified:Apr 23, 2026
    EPS:Oct 27, 2009
    EPSS Score:0.01325
    CVSS Score:4.3

    Affected Products

    Vendor
    Gpg4win
    Product
    Gpg4win
    Vendor
    Kde-apps
    Product
    Kleopatra

    Exploits

    http://www.packetstormsecurity.com/0910-exploits/gpg2kleo-dos.txthttp://www.securityfocus.com/bid/36781http://www.packetstormsecurity.com/0910-exploits/gpg2kleo-dos.txthttp://www.securityfocus.com/bid/36781https://www.exploit-db.com/exploits/9884

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-24883 (CVSS 3.7) — In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data…
    CVE-2026-24882 (CVSS 8.4) — In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT co…
    CVE-2026-24881 (CVSS 8.1) — In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key…
    CVE-2022-3515 (CVSS 9.8) — A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnera…
    CVE-2020-25125 (CVSS 7.8) — GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified…
    CVE-2006-6235 (CVSS 10) — A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High