CVE-2007-1263

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-1263. PoCs published by Gerardo Richarte.

AI-analyzed exploit summary This exploit demonstrates a weakness in GnuPG where arbitrary content can be injected into a signed/encrypted message without detection. It manipulates the packet structure to append data while preserving the original signature.

Description

GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP messages with multiple components, which might allow remote attackers to forge the contents of a message without detection.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Gerardo Richarte · pythonremotelinux

https://www.exploit-db.com/exploits/29689

View Code ZIP pw:eip

This exploit demonstrates a weakness in GnuPG where arbitrary content can be injected into a signed/encrypted message without detection. It manipulates the packet structure to append data while preserving the original signature.

Classification

Working Poc 90%

Attack Type

Other

Complexity

Moderate

Reliability

Reliable

Target: GnuPG (versions affected by CVE-2007-1263)

No auth needed

Prerequisites: A valid signed/encrypted message to modify · Access to the target's GnuPG-processed messages

MITRE ATT&CK

T1553.002 - Code Signing

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (33)

Core 33

Core References

Issue Tracking x_refsource_confirm

https://issues.rpath.com/browse/RPL-1111

Vendor Advisory vendor-advisory x_refsource_trustix

http://www.trustix.org/errata/2007/0009/

Vendor Advisory x_refsource_confirm

http://support.avaya.com/elmodocs2/security/ASA-2007-144.htm

Mailing List vendor-advisory x_refsource_fedora

http://fedoranews.org/cms/node/2776

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/24407

Various Sources mailing-list x_refsource_mlist

http://lists.gnupg.org/pipermail/gnupg-users/2007-March/030514.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/24438

Mailing List vendor-advisory x_refsource_fedora

http://fedoranews.org/cms/node/2775

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/24650

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10496

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/2353

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2007-0107.html

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2007/dsa-1266

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/461958/30/7710/threaded

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/24511

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/usn-432-1

Patch, Vendor Advisory x_refsource_misc

http://www.coresecurity.com/?action=item&id=1687

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/461958/100/0/threaded

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/24734

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/24419

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/24544

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/usn-432-2

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/24420

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/24875

Vendor Advisory vendor-advisory x_refsource_sgi

ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/24365

Vendor Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDKSA-2007:059

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2007-0106.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/22757

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1017727

Various Sources vendor-advisory x_refsource_suse

http://lists.suse.com/archive/suse-security-announce/2007-Mar/0008.html

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/0835

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/24489

GnuPG < 1.4.6 and GPGME < 1.1.4 - Unauthenticated Message Forgery via OpenPGP Message Rendering

Exploitation Summary

Description

Exploits (1)

References (33)

Scores

Details