Enigmail prior to 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to display a "correctly signed" message indication, but display different unauthenticated text.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
enigmail enigmail |