Description: A vulnerability has been reported in GnuPG, which potentially can be exploited by malicious people to cause a DoS (Denial of Service).
The vulnerability is cause due to an input validation error within "parse-packet.c" when handling the length of a message packet. This can be exploited to cause gpg to consume large amount of memory or crash via an overly large packet length in a message packet. This can be further exploited to cause an integer overflow which leads to a possible memory corruption that crashes gpg.
Successful exploitation requires that the "--no-armor" option is used.
The vulnerability has been reported in version 1.4.3 and in development version 1.9.20. Prior versions may also be affected.
Solution: Update to version 1.4.4.
Provided and/or discovered by: Evgeny Legerov
Changelog: 2006-07-03: Vendor issues version 1.4.4. Updated "Solution" section.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
