CVE-2007-1263

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

5.36%

Published

Mar 6, 2007

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBGnuPG 1.x - Signed Message Arbitrary Content Injection TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP messages with multiple components, which might allow remote attackers to forge the contents of a message without detection.

Affected Products (2)

gnu · gpgmevulnerable

gnupg · gnupgvulnerable

References (20)

ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc

http://fedoranews.org/cms/node/2775

http://fedoranews.org/cms/node/2776

http://lists.gnupg.org/pipermail/gnupg-users/2007-March/030514.html

http://lists.suse.com/archive/suse-security-announce/2007-Mar/0008.html

http://secunia.com/advisories/24365

http://secunia.com/advisories/24407

http://secunia.com/advisories/24419

http://secunia.com/advisories/24420

KEV Catalog EPSS Scores Vendors All CVEs