CVE-2007-1265

Publication date 29 September 2008

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

KMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents KMail from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without detection.

Status

Package Ubuntu Release Status
kdepim 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected