CVE ID:	CVE-2006-6235
Description:	A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.
Test IDs:	1.3.6.1.4.1.25623.1.0.59076   1.3.6.1.4.1.25623.1.0.57673   1.3.6.1.4.1.25623.1.0.57713   1.3.6.1.4.1.25623.1.0.57707   1.3.6.1.4.1.25623.1.0.57709
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2006-6235 BugTraq ID: 21462 http://www.securityfocus.com/bid/21462 Bugtraq: 20061206 GnuPG: remotely controllable function pointer [CVE-2006-6235] (Google Search) http://www.securityfocus.com/archive/1/453664/100/0/threaded Bugtraq: 20061206 rPSA-2006-0227-1 gnupg (Google Search) http://www.securityfocus.com/archive/1/453723/100/0/threaded CERT/CC vulnerability note: VU#427009 http://www.kb.cert.org/vuls/id/427009 Debian Security Information: DSA-1231 (Google Search) http://www.debian.org/security/2006/dsa-1231 http://security.gentoo.org/glsa/glsa-200612-03.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:228 http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000491.html http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11245 RedHat Security Advisories: RHSA-2006:0754 http://www.redhat.com/support/errata/RHSA-2006-0754.html http://securitytracker.com/id?1017349 http://secunia.com/advisories/23245 http://secunia.com/advisories/23250 http://secunia.com/advisories/23255 http://secunia.com/advisories/23259 http://secunia.com/advisories/23269 http://secunia.com/advisories/23284 http://secunia.com/advisories/23290 http://secunia.com/advisories/23299 http://secunia.com/advisories/23303 http://secunia.com/advisories/23329 http://secunia.com/advisories/23335 http://secunia.com/advisories/23513 http://secunia.com/advisories/24047 SGI Security Advisory: 20061201-01-P ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc SuSE Security Announcement: SUSE-SA:2006:075 (Google Search) http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html SuSE Security Announcement: SUSE-SR:2006:028 (Google Search) http://www.novell.com/linux/security/advisories/2006_28_sr.html http://www.trustix.org/errata/2006/0070 http://www.ubuntu.com/usn/usn-393-1 http://www.ubuntu.com/usn/usn-393-2 http://www.vupen.com/english/advisories/2006/4881 XForce ISS Database: gnupg-openpgp-code-execution(30711) https://exchange.xforce.ibmcloud.com/vulnerabilities/30711