Unscored severity · published Oct 27, 2009
CVE-2009-3805
gpg2.exe in Gpg4win 2.0.1, as used in KDE Kleopatra 2.0.11, allows remote attackers to cause a denial of service (application crash) via a long certificate signature
–
CVSS
1.4%
EPSS
No
On KEV
Description
gpg2.exe in Gpg4win 2.0.1, as used in KDE Kleopatra 2.0.11, allows remote attackers to cause a denial of service (application crash) via a long certificate signature.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GP
Gpg4win · Gpg4win
2.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-3805
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-3805
Exploit
http://www.packetstormsecurity.com/0910-exploits/gpg2kleo-dos.txt
Exploit
http://www.securityfocus.com/bid/36781
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/53908
More from Gpg4win
9.8
CVE-2026-24881
In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during…
9.8
CVE-2022-3515
A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser
7.8
CVE-2026-24882
In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys
7.8
CVE-2020-25125
GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker's OpenPGP key, and…
5.5
CVE-2026-24883
In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application…