Security Advisory

CVE-2020-24972

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-08-29 20:40:19

Last updated 2024-08-04 15:26:09

Assigner mitre

State PUBLISHED

Description

The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handling of command-line options. The Qt platformpluginpath command-line option can be used to load an arbitrary DLL.

← Browse all CVEs View on cve.org ↗