CVE-2007-1266
EPSS 4.8%發布日:2007/3/6修改日:2026/4/28
描述
Evolution 2.8.1 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Evolution from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without detection.
受影響套件(1)
- Debian/evolutionfrom 0