GnuPG Duplicated Key Import Memory Corruption Vulnerability

GnuPG Duplicated Key Import Memory Corruption Vulnerability

References:

#2008-01 GnuPG memory corruption (oCERT)
[Announce] GnuPG 1.4.9 released (GnuPG)
Gentoo Bug 214990 app-crypt/gnupg =1.4.8, =2.0.8 Memory corruption when importin (Gentoo)
GnuPG Homepage (GnuPG)
Issue894 segv when importing keys with duplicated ids. (GnuPG)

Privacy Statement
Copyright 2010, SecurityFocus