CVE-2007-1267 - CVE House
Back to Database
Status published Medium CVE-2007-1267

Sylpheed 2.2.7 and earlier does not properly use the --status-fd...

Vulnerability Description

Sylpheed 2.2.7 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Sylpheed from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without detection.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-1267

Credits & Attribution

No credits recorded in the NVD database.

References

More from sylpheed

View All →
CVE-2007-2958
Format string vulnerability in the inc_put_error function in src/inc.c in...
Medium 6.8
CVE-2006-2920
Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow remote attackers...
Low 2.6
CVE-2005-3354
Stack-based buffer overflow in the ldif_get_line function in ldif.c of...
Medium 5.1
CVE-2005-0926
Buffer overflow in Sylpheed before 1.0.4 allows remote attackers to...
Medium 5.1
CVE-2005-0667
Buffer overflow in Sylpheed before 1.0.3 and other versions before...
Medium 5.1

Affected Vendor

Affected Software

sylpheed
Vulnerable Versions:
0

Timeline

Official Publish: March 6th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.