CVE-2007-1266: Medium severity Gnome Evolution vulnerability
Evolution 2.8.1 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Evolution from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without detection.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1266?
CVE-2007-1266 is classified as a moderate severity vulnerability due to its potential for message forgery.
How do I fix CVE-2007-1266?
To fix CVE-2007-1266, upgrade to Evolution version 2.8.2 or later, which addresses the issue.
What are the risks associated with CVE-2007-1266?
The risks associated with CVE-2007-1266 include the potential for attackers to forge OpenPGP message content.
Which versions of Evolution are affected by CVE-2007-1266?
CVE-2007-1266 affects Evolution versions 2.8.1 and earlier.
How does CVE-2007-1266 impact OpenPGP message security?
CVE-2007-1266 impacts OpenPGP message security by preventing proper visual distinction between signed and unsigned message portions.