← Vulnerability feed

Vulnerability record · CVE-2009-3805 · published 27 October 2009

CVE-2009-3805: Gpg4win vulnerability

Gpg4win · Gpg4win

gpg2.exe in Gpg4win 2.0.1, as used in KDE Kleopatra 2.0.11, allows remote attackers to cause a denial of service (application crash) via a long certificate signature.

4.3 CVSS 2.0 Medium EPSS 1.4% · top 28.9%
4.3CVSS 2.0 base score
1.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References, 4 tagged exploit
16 Jun 2026Last modified by NVD

Description

gpg2.exe in Gpg4win 2.0.1, as used in KDE Kleopatra 2.0.11, allows remote attackers to cause a denial of service (application crash) via a long certificate signature.

AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.packetstormsecurity.com/0910-exploits/gpg2kleo-dos.txt Exploit
http://www.securityfocus.com/bid/36781 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/53908
http://www.packetstormsecurity.com/0910-exploits/gpg2kleo-dos.txt Exploit
http://www.securityfocus.com/bid/36781 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/53908

Track CVE-2009-3805 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2006-6235Gnu privacy guard vulnerabilityA "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary c…EPSS 5.9%9.8CVE-2026-24881Gnupg stack-based buffer overflow vulnerabilityIn GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflo…EPSS 1.8%9.8CVE-2022-3515Gnupg libksba integer overflow vulnerabilityA vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for co…EPSS 1.6%7.8CVE-2026-24882Gnupg stack-based buffer overflow vulnerabilityIn GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.EPSS 0.44%7.8CVE-2020-25125Gnupg classic buffer overflow vulnerabilityGnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an…EPSS 1.3%5.5CVE-2026-24883Gnupg null pointer dereference vulnerabilityIn GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a de…EPSS 0.50%

Source: NIST National Vulnerability Database (record CVE-2009-3805), CISA KEV, FIRST EPSS (scores of 2026-10-05). This page is refreshed as NVD updates the record.