CVE:CVE-2014-3564
CNNVD:CNNVD-201408-019
GPGME（GnuPG Made Easy）是一个用于访问GnuPG应用程序的库，它提供了用于加密、解密和签名验证等高级别加密API。
GPGME 1.5.1之前版本的engine-gpgsm.c和engine-uiserver.c脚本中的‘status_handler’函数中存在基于堆的缓冲区溢出漏洞。远程攻击者可利用该漏洞造成拒绝服务（崩溃），或执行任意代码。
solution:Upgrade gnu gpgme to a higher version than 1.5.0,and avoid the version (,1.5.0]; Upgrade canonical ubuntu_linux to a higher version than 10.04,12.04,and avoid the version 10.04,12.04; Upgrade debian debian_linux to a higher version than 6.0,and avoid the version 6.0