CVE-2014-3564

Multiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2) engine-uiserver.c in GPGME before 1.5.1 allow remote…

published October 20, 2014

CVSS
—
EPSS
4%
Percentile
91.0
In the wild
Unconfirmed
What it is

Multiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2) engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to "different line lengths in a specific order."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04289 · 91.0th percentile
Published
2014-10-20T17:00Z
EPSS history
Timeline
  • 20 OCT 17:00Z
    Multiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2) engine-uiserver.c in GPGME before 1.5.1 allow remote…
    cvelistv5