VYPR
Unrated severityNVD Advisory· Published Mar 6, 2007· Updated Jun 16, 2026

CVE-2007-1263

CVE-2007-1263

Description

GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP messages with multiple components, which might allow remote attackers to forge the contents of a message without detection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • cpe:2.3:a:gnu:gpgme:*:*:*:*:*:*:*:*
    Range: <=1.1.3
  • Gnupg/Gnupg2 versions
    cpe:2.3:a:gnupg:gnupg:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:gnupg:gnupg:*:*:*:*:*:*:*:*range: <=1.4.6
    • (no CPE)range: <=1.4.6
  • Gnupg/GPGMEllm-create
    Range: <1.1.4

Patches

Vulnerability mechanics

References

33

News mentions

0

No linked articles in our index yet.