Описание
Enigmail before 2.0.6 is prone to to OpenPGP signatures being spoofed for arbitrary messages using a PGP/INLINE signature wrapped within a specially crafted multipart HTML email.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 2:2.0.8-0ubuntu1~18.04.2 |
| cosmic | not-affected | |
| devel | not-affected | |
| esm-apps/bionic | not-affected | 2:2.0.8-0ubuntu1~18.04.2 |
| esm-apps/xenial | not-affected | 2:2.0.8-1~ubuntu0.16.04.2 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected [2:2.0.8-1~ubuntu0.14.04.2]] |
| precise/esm | DNE | |
| trusty | not-affected | 2:2.0.8-1~ubuntu0.14.04.2 |
| trusty/esm | DNE | trusty was not-affected [2:2.0.8-1~ubuntu0.14.04.2] |
| upstream | released | 2:2.0.6.1-2 |
Показывать по
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
Enigmail before 2.0.6 is prone to to OpenPGP signatures being spoofed for arbitrary messages using a PGP/INLINE signature wrapped within a specially crafted multipart HTML email.
Enigmail before 2.0.6 is prone to to OpenPGP signatures being spoofed ...
Enigmail before 2.0.6 is prone to to OpenPGP signatures being spoofed for arbitrary messages using a PGP/INLINE signature wrapped within a specially crafted multipart HTML email.
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3