|
GnuPG Incorrect Non-Detached Signature Verification Vulnerability
GnuPG is prone to a vulnerability involving incorrect verification of non-detached signatures. A successful attack can allow an attacker to simply take a signed message, inject arbitrary data into it, and bypass verification. Note that this issue also affects verification of signatures embedded in encrypted messages. Scripts and applications using gpg are affected, as are applications using the GPGME library. GnuPG versions prior to 1.4.2.2 are vulnerable to this issue. |
|
|
Privacy Statement |
