CVE-2007-1265: KMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents KMail from visually distinguishing between signed and unsigned portions…

Unscored severity · published Mar 6, 2007

CVE-2007-1265

KMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents KMail from visually distinguishing between signed and unsigned portions…

–

CVSS

2.1%

EPSS

On KEV

Description

KMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents KMail from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without detection.

Exploitation

Is it being used?

Exploit prediction (EPSS)2.1% · higher than 82% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

K-mail · Kde

0.0.29.2; 1.0.23; 1.0.24; 1.0.25; 1.0.26; 1.0.27; +20 more · source: NVD

Affected product

K-mail