← back
CVE-2007-1263

CVE-2007-1263

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 5.4%
from disclosure to weapon0 days
Published on NVDMar 6
1st PoCMar 5
exploitation probability
5.4%top 8% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP messages with multiple components, which might allow remote attackers to forge the contents of a message without detection.
Affected products
n/a · n/a
public PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/29689
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.aschttp://fedoranews.org/cms/node/2775http://fedoranews.org/cms/node/2776http://lists.gnupg.org/pipermail/gnupg-users/2007-March/030514.htmlhttp://lists.suse.com/archive/suse-security-announce/2007-Mar/0008.htmlhttp://secunia.com/advisories/24365http://secunia.com/advisories/24407http://secunia.com/advisories/24419http://secunia.com/advisories/24420http://secunia.com/advisories/24438http://secunia.com/advisories/24489http://secunia.com/advisories/24511