CVE-2001-0522

Description

Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is stored in an encrypted file.

Risk Information

Base Score

6.2

MODERATE

Vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

11.135

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2001-0522 are affected in GNU Privacy Guard (x64) 7.1	Windows
Vulnerabilities CVE-2001-0522 are affected in GNU Privacy Guard (x64) 7.2	Windows
Vulnerabilities CVE-2001-0522 are affected in GNU Privacy Guard (x64) 8.0	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234