CVE-2007-1263

GnuPG <1.4.6 - Info Disclosure

Title source: llm
STIX 2.1

Description

GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP messages with multiple components, which might allow remote attackers to forge the contents of a message without detection.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Gerardo Richarte · pythonremotelinux
https://www.exploit-db.com/exploits/29689

References (33)

Core 33
Core References
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-1111
Vendor Advisory vendor-advisory x_refsource_trustix
http://www.trustix.org/errata/2007/0009/
Mailing List vendor-advisory x_refsource_fedora
http://fedoranews.org/cms/node/2776
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24407
Various Sources mailing-list x_refsource_mlist
http://lists.gnupg.org/pipermail/gnupg-users/2007-March/030514.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24438
Mailing List vendor-advisory x_refsource_fedora
http://fedoranews.org/cms/node/2775
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24650
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10496
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/2353
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0107.html
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2007/dsa-1266
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/461958/30/7710/threaded
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24511
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-432-1
Patch, Vendor Advisory x_refsource_misc
http://www.coresecurity.com/?action=item&id=1687
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/461958/100/0/threaded
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24734
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24419
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24544
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-432-2
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24420
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24875
Vendor Advisory vendor-advisory x_refsource_sgi
ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24365
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2007:059
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0106.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/22757
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1017727
Various Sources vendor-advisory x_refsource_suse
http://lists.suse.com/archive/suse-security-announce/2007-Mar/0008.html
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0835
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24489

Scores

EPSS 0.2546
EPSS Percentile 96.2%

Details

Status published
Products (2)
gnu/gpgme < 1.1.3
gnupg/gnupg < 1.4.6
Published Mar 06, 2007
Tracked Since Feb 18, 2026