GCVE-110-CERTCC-2001-403051

Advisory Published

Vulnetix · Advisory published May 29, 2001

There is a format string vulnerability in GNU Privacy Guard. By sending a GPG message with a carefully crafted malicious filename, an attacker may be able to execute arbitrary code as the user who decrypts the message.

Download JSON Open in Console

Risk Scores

certcc-cam

impact15population15exploitation0widely_known15score_current21.9375ease_of_exploitation13

Aliases

CVE-2001-0522

References

GnuPG format string vulnerability in do_get() in ttyio.c while prompting for a new filename

url

GnuPG format string vulnerability in do_get() in ttyio.c while prompting for a new filename

advisory

GnuPG format string vulnerability in do_get() in ttyio.c while prompting for a new filename

url

GnuPG format string vulnerability in do_get() in ttyio.c while prompting for a new filename

url

GnuPG format string vulnerability in do_get() in ttyio.c while prompting for a new filename

url

GnuPG format string vulnerability in do_get() in ttyio.c while prompting for a new filename

url

GnuPG format string vulnerability in do_get() in ttyio.c while prompting for a new filename

url

GnuPG format string vulnerability in do_get() in ttyio.c while prompting for a new filename

url

GnuPG format string vulnerability in do_get() in ttyio.c while prompting for a new filename

url

GnuPG format string vulnerability in do_get() in ttyio.c while prompting for a new filename

url

GnuPG format string vulnerability in do_get() in ttyio.c while prompting for a new filename

url

GnuPG format string vulnerability in do_get() in ttyio.c while prompting for a new filename

url

GnuPG format string vulnerability in do_get() in ttyio.c while prompting for a new filename

url

GnuPG format string vulnerability in do_get() in ttyio.c while prompting for a new filename

advisory

Browse GCVE Records

73,196 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON