KMail 1.9.5 and previous versions does not properly use the --status-fd argument when invoking GnuPG, which prevents KMail from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote malicious users to forge the contents of a message without detection.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
kde k-mail 1.0.27 |
||
kde k-mail 1.0.28 |
||
kde k-mail 1.2 |
||
kde k-mail 1.3.1 |
||
kde k-mail 1.92 |
||
kde k-mail 1.93 |
||
kde k-mail 1.0.25 |
||
kde k-mail 1.0.26 |
||
kde k-mail 1.101 |
||
kde k-mail 1.102 |
||
kde k-mail 1.89 |
||
kde k-mail 1.9.1 |
||
kde k-mail 1.90 |
||
kde k-mail 0.0.29.2 |
||
kde k-mail 1.0.29 |
||
kde k-mail 1.0.29.1 |
||
kde k-mail 1.7.1 |
||
kde k-mail 1.86.2.36 |
||
kde k-mail 1.94 |
||
kde k-mail 1.95 |
||
kde k-mail 1.0.23 |
||
kde k-mail 1.0.24 |
||
kde k-mail 1.0.29.2 |
||
kde k-mail 1.1 |
||
kde k-mail 1.87 |
||
kde k-mail 1.88 |
Vulmon