CVE-2019-12269 PUBLISHED

Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to display a "correctly signed" message indication, but display different unauthenticated text.

EPSS 0.28% · 51.6th percentile

Risk Scores

EPSS Score
0.28%
51.6th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSenigmail0, 2:1.8.2-0ubuntu1, 2:1.8.2-4fakesync1
Ubuntu:18.04:LTSenigmail0, 2:1.9.8.3-1, 2:1.9.9-1

Timeline

References

Open in Interactive Console →