Kleopatra Project Kleopatra 16.04.1 for GnuPG

CPE Details

Kleopatra Project Kleopatra 16.04.1 for GnuPG
kleopatra_project
kleopatra
16.04.1
2020-09-04
14h37 +00:00
2020-09-04
14h37 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:kleopatra_project:kleopatra:16.04.1:*:*:*:*:gnupg:*:*

Informations

Vendor

kleopatra_project

Product

kleopatra

Version

16.04.1

Target Software

gnupg

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-24972 2020-08-29 18h40 +00:00 The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handling of command-line options. The Qt platformpluginpath command-line option can be used to load an arbitrary DLL.
8.8
High
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.