CVE-2019-12269

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-06/msg00061.html
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AVNTEF3WSOOQYKMIPEH7F77UPXES5BU5
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CYWBJHSBBLAHKMRWDWH2XXQDYAGDHB5I
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GHC5WDQ47FQSL5CTGQUYIHVC3RNZ7UH5
• sourceforge.net/p/enigmail/bugs/983 · Exploit
• enigmail.net/index.php/en/download/changelog · Release Notes

enigmail のその他の脆弱性

• CVE-2019-14664中 6.5In Enigmail below 2.1, an attacker in possession of PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The en…
• CVE-2018-15586中 6.5Enigmail before 2.0.6 is prone to to OpenPGP signatures being spoofed for arbitrary messages using a PGP/INLINE signature wrapped within a s…
• CVE-2018-12019高 7.5The signature verification routine in Enigmail before 2.0.7 interprets user ids as status/control messages and does not correctly keep track…
• CVE-2017-17848高 7.5An issue was discovered in Enigmail before 1.9.9. In a variant of CVE-2017-17847, signature spoofing is possible for multipart/related messa…
• CVE-2017-17847高 7.5An issue was discovered in Enigmail before 1.9.9. Signature spoofing is possible because the UI does not properly distinguish between an att…