CVE-2007-1267
EPSS 1.3%發布日:2007/3/6修改日:2026/4/28
描述
Sylpheed 2.2.7 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Sylpheed from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without detection.
受影響套件(1)
- Debian/sylpheedfrom 0