CVE-2007-1265

KMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents KMail from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without detection.

• kde k-mail 0.0.29.2 • kde k-mail 1.0.23 • kde k-mail 1.0.24 • kde k-mail 1.0.25 • kde k-mail 1.0.26 • kde k-mail 1.0.27 • kde k-mail 1.0.28 • kde k-mail 1.0.29 • kde k-mail 1.0.29.1 • kde k-mail 1.0.29.2 • kde k-mail 1.1 • kde k-mail 1.2 • kde k-mail 1.3.1 • kde k-mail 1.7.1 • kde k-mail 1.9.1 • kde k-mail 1.86.2.36 • kde k-mail 1.87 • kde k-mail 1.88 • kde k-mail 1.89 • kde k-mail 1.90 • kde k-mail 1.92 • kde k-mail 1.93 • kde k-mail 1.94 • kde k-mail 1.95 • kde k-mail 1.101 • kde k-mail 1.102