CVE-2007-1268: Medium severity Mutt Mutt vulnerability
Mutt 1.5.13 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Mutt from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without detection.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1268?
CVE-2007-1268 is considered a moderate severity vulnerability due to its potential for allowing unauthorized message forgery.
How do I fix CVE-2007-1268?
To fix CVE-2007-1268, upgrade to Mutt version 1.5.14 or later to ensure proper handling of OpenPGP message signatures.
What versions of Mutt are affected by CVE-2007-1268?
Mutt versions 1.5.13 and earlier are affected by CVE-2007-1268.
What impact does CVE-2007-1268 have on email communications?
CVE-2007-1268 can allow attackers to forge the contents of OpenPGP messages, compromising the integrity of email communications.
Is CVE-2007-1268 specific to certain operating systems?
CVE-2007-1268 is not limited to specific operating systems but is dependent on the Mutt mail client version being used.