CVE-2019-12269

Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to display a "correctly signed" message…

published May 21, 2019

CVSS
—
EPSS
1%
Percentile
67.5
In the wild
Unconfirmed
What it is

Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to display a "correctly signed" message indication, but display different unauthenticated text.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01180 · 67.5th percentile
Published
2019-05-21T19:50Z
EPSS history
Timeline
  • 21 MAY 19:50Z
    Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to display a "correctly signed" message…
    cvelistv5