CVE-2010-2547

Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x
through 2.0.16 allows remote attackers to cause a denial of service (crash)
and possibly execute arbitrary code via a certificate with a large number
of Subject Alternate Names, which is not properly handled in a realloc
operation when importing the certificate or verifying its signature.

Bugs

• <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-2547&gt;
• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590122&gt;