CVE-2007-1263

GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP messages with multiple components, which might allow remote attackers to forge the contents of a message without detection.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

5.36% chance of exploitation in the next 30 days, 92th percentile

Published

2007-03-06

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/29689

References

• CVE Record
• NVD entry

Related

• CVE-2007-1260
• CVE-2007-1264
• CVE-2007-1255
• CVE-2007-1266
• CVE-2007-1254
• CVE-2007-1267