CVEvulnerability

CVE-2007-1263

5.0 MEDIUM Published 2007-03-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-03-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP messages with multiple components, which might allow remote attackers to forge the contents of a message without detection.

Affected configurations

• gnu gpgme (<= 1.1.3) • gnupg gnupg (<= 1.4.6)

References