PT-2019-12722 · Enigmail+1 · Enigmail+1

Jens Müller · Publicado 2019-05-21 · Atualizado 2024-06-15 · CVE-2019-12269

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Enigmail versions prior to 2.0.11

Description The issue allows PGP signature spoofing. For an inline PGP message, an attacker can cause the product to display a "correctly signed" message indication, but display different unauthenticated text.

Recommendations For versions prior to 2.0.11, update to version 2.0.11 or later to resolve the issue.

Exploit

Correção

Improper Verification of Cryptographic Signature

Enumeração de Fraquezas

CWE-347

Identificadores relacionados

CVE-2019-12269

OPENSUSE-SU-2019:1612-1

OPENSUSE-SU-2019_1612-1

OPENSUSE-SU-2024:10736-1

SUSE-SU-2019:1576-1

Produtos afetados

Enigmail

Suse

Referências · 24

• 🔥 https://sourceforge.net/p/enigmail/bugs/983 · Exploit
• https://suse.com/security/cve/CVE-2018-12020 · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/CI6BIXCQAKIHNU6GDO2SRVP2OU74DT7Q/#CI6BIXCQAKIHNU6GDO2SRVP2OU74DT7Q · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2019:1612-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:10736-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-12269 · Aviso do Fabricante
• https://bugzilla.suse.com/1135855 · Nota
• https://suse.com/support/update/announcement/2019/suse-su-20191576-1 · Nota
• https://suse.com/security/cve/CVE-2017-17689 · Nota
• https://suse.com/security/cve/CVE-2019-12269 · Nota
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AVNTEF3WSOOQYKMIPEH7F77UPXES5BU5 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CYWBJHSBBLAHKMRWDWH2XXQDYAGDHB5I · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-12269 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00061.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-12269 · Aviso do Fabricante