Kleopatra Project: >> Kleopatra >> 16.04.2 Security Vulnerabilities
The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handling of command-line options. The Qt platformpluginpath command-line option can be used to load an arbitrary DLL.
CVSS Score
8.8
EPSS Score
0.211
Published
2020-08-29