CVE-2007-1263
CVE-2007-1263
GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP messages with multiple components, which might allow remote attackers to forge the contents of a message without detection.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 1
exploitdbwww.exploit-db.com/exploits/29689não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Quer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →Referências
ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.aschttp://fedoranews.org/cms/node/2775http://fedoranews.org/cms/node/2776http://lists.gnupg.org/pipermail/gnupg-users/2007-March/030514.htmlhttp://lists.suse.com/archive/suse-security-announce/2007-Mar/0008.htmlhttp://secunia.com/advisories/24365http://secunia.com/advisories/24407http://secunia.com/advisories/24419http://secunia.com/advisories/24420http://secunia.com/advisories/24438http://secunia.com/advisories/24489http://secunia.com/advisories/24511