Vulnetix
Try Vulnetix Request Demo
CVE-2017-17844 PUBLISHED

An issue was discovered in Enigmail before 1.9.9. A remote attacker can obtain cleartext content by sending an encrypted data block (that the attacker cannot directly decrypt) to a victim, and relying on the victim to automatically decrypt that block and then send it back to the attacker as quoted text, aka the TBE-01-005 "replay" issue.

EPSS 0.24% · 46.7th percentile

Risk Scores

EPSS Score
0.24%
46.7th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSenigmail0, 2:1.5.2-0ubuntu1, 2:1.7-0ubuntu0.14.04.1
Ubuntu:16.04:LTSenigmail0, 2:1.8.2-0ubuntu1, 2:1.8.2-4fakesync1

Timeline

References

Open in Interactive Console →