2019-02-11 18:29:00 2019-02-12 17:32:42

Enigmail before 2.0.6 is prone to to OpenPGP signatures being spoofed for arbitrary messages using a PGP/INLINE signature wrapped within a specially crafted multipart HTML email.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE
Enigmail Enigmail 0.74.0 (not an official CPE) Enigmail Enigmail 0.74.1 (not an official CPE) Enigmail Enigmail 0.75.0 (not an official CPE) Enigmail Enigmail 0.76.0 (not an official CPE) Enigmail Enigmail 0.76.1 (not an official CPE) Enigmail Enigmail 0.76.2 (not an official CPE) Enigmail Enigmail 0.76.3 (not an official CPE) Enigmail Enigmail 0.76.4 (not an official CPE) Enigmail Enigmail 0.76.7 (not an official CPE) Enigmail Enigmail 0.76.8 (not an official CPE) Enigmail Enigmail 0.80.0 (not an official CPE) Enigmail Enigmail 0.81.2 (not an official CPE) Enigmail Enigmail 0.81.5 (not an official CPE) Enigmail Enigmail 0.81.6 (not an official CPE) Enigmail Enigmail 0.81.7 (not an official CPE) Enigmail Enigmail 0.82.0 (not an official CPE) Enigmail Enigmail 0.82.1 (not an official CPE) Enigmail Enigmail 0.82.2 (not an official CPE) Enigmail Enigmail 0.82.3 (not an official CPE) Enigmail Enigmail 0.82.4 (not an official CPE) Enigmail Enigmail 0.82.5 (not an official CPE) Enigmail Enigmail 0.82.6 (not an official CPE) Enigmail Enigmail 0.83.0 (not an official CPE) Enigmail Enigmail 0.83.1 (not an official CPE) Enigmail Enigmail 0.83.2 (not an official CPE) Enigmail Enigmail 0.83.3 (not an official CPE) Enigmail Enigmail 0.83.4 (not an official CPE) Enigmail Enigmail 0.83.5 (not an official CPE) Enigmail Enigmail 0.83.6 (not an official CPE) Enigmail Enigmail 0.84.0 (not an official CPE) Enigmail Enigmail 0.84.1 (not an official CPE) Enigmail Enigmail 0.84.2 (not an official CPE) Enigmail Enigmail 0.85.0 (not an official CPE) Enigmail Enigmail 0.86.0 (not an official CPE) Enigmail Enigmail 0.86.1 (not an official CPE) Enigmail Enigmail 0.89.0 (not an official CPE) Enigmail Enigmail 0.89.1 (not an official CPE) Enigmail Enigmail 0.89.2 (not an official CPE) Enigmail Enigmail 0.89.3 (not an official CPE) Enigmail Enigmail 0.89.4 (not an official CPE) Enigmail Enigmail 0.89.5 (not an official CPE) Enigmail Enigmail 0.89.6 (not an official CPE) Enigmail Enigmail 0.90.0 (not an official CPE) Enigmail Enigmail 0.90.1 (not an official CPE) Enigmail Enigmail 0.90.2 (not an official CPE) Enigmail Enigmail 0.91.0 (not an official CPE) Enigmail Enigmail 0.92.0 (not an official CPE) Enigmail Enigmail 0.92.1 (not an official CPE) Enigmail Enigmail 0.93.0 (not an official CPE) Enigmail Enigmail 0.93.1 (not an official CPE) Enigmail Enigmail 0.93.2 (not an official CPE) Enigmail Enigmail 0.94.0 (not an official CPE) Enigmail Enigmail 0.94.1 (not an official CPE) Enigmail Enigmail 0.94.2 (not an official CPE) Enigmail Enigmail 0.94.3 (not an official CPE) Enigmail Enigmail 0.94.4 (not an official CPE) Enigmail Enigmail 0.95.0 (not an official CPE) Enigmail Enigmail 0.95.1 (not an official CPE) Enigmail Enigmail 0.95.2 (not an official CPE) Enigmail Enigmail 0.95.3 (not an official CPE) Enigmail Enigmail 0.95.4 (not an official CPE) Enigmail Enigmail 0.95.5 (not an official CPE) Enigmail Enigmail 0.95.6 (not an official CPE) Enigmail Enigmail 0.95.7 (not an official CPE) Enigmail Enigmail 0.96.0 (not an official CPE) Enigmail Enigmail 1.0.0 (not an official CPE) Enigmail Enigmail 1.1.0 (not an official CPE) Enigmail Enigmail 1.1.1 (not an official CPE) Enigmail Enigmail 1.1.2 (not an official CPE) Enigmail Enigmail 1.2.0 (not an official CPE) Enigmail Enigmail 1.2.1 (not an official CPE) Enigmail Enigmail 1.3.0 (not an official CPE) Enigmail Enigmail 1.3.1 (not an official CPE) Enigmail Enigmail 1.3.2 (not an official CPE) Enigmail Enigmail 1.3.3 (not an official CPE) Enigmail Enigmail 1.3.4 (not an official CPE) Enigmail Enigmail 1.3.5 (not an official CPE) Enigmail Enigmail 1.4.0 (not an official CPE) Enigmail Enigmail 1.4.1 (not an official CPE) Enigmail Enigmail 1.4.2 (not an official CPE) Enigmail Enigmail 1.4.3 (not an official CPE) Enigmail Enigmail 1.4.4 (not an official CPE) Enigmail Enigmail 1.4.5 (not an official CPE) Enigmail Enigmail 1.4.6 (not an official CPE) Enigmail Enigmail 1.5.0 (not an official CPE) Enigmail Enigmail 1.5.1 (not an official CPE) Enigmail Enigmail 1.5.2 (not an official CPE) Enigmail Enigmail 1.6.0 (not an official CPE) Enigmail 1.7 Enigmail Enigmail 1.7.0 (not an official CPE) Enigmail 1.7.2 Enigmail Enigmail 1.8.0 (not an official CPE) Enigmail Enigmail 1.8.1 (not an official CPE) Enigmail Enigmail 1.8.2 (not an official CPE) Enigmail Enigmail 1.9.0 (not an official CPE) Enigmail Enigmail 1.9.1 (not an official CPE) Enigmail Enigmail 1.9.2 (not an official CPE) Enigmail Enigmail 1.9.3 (not an official CPE) Enigmail Enigmail 1.9.4 (not an official CPE) Enigmail Enigmail 1.9.5 (not an official CPE) Enigmail Enigmail 1.9.6 (not an official CPE) Enigmail Enigmail 1.9.6.1 (not an official CPE) Enigmail Enigmail 1.9.7 (not an official CPE) Enigmail Enigmail 1.9.8 (not an official CPE) Enigmail Enigmail 1.9.9 (not an official CPE) Enigmail Enigmail 2.0 (not an official CPE) Enigmail Enigmail 2.0.1 (not an official CPE) Enigmail Enigmail 2.0.2 (not an official CPE) Enigmail Enigmail 2.0.3 (not an official CPE) Enigmail Enigmail 2.0.4 (not an official CPE) Enigmail Enigmail 2.0.5 (not an official CPE)
Advisory Patch Confirmed Link
https://sourceforge.net/p/enigmail/bugs/849/