CVE-2010-3618
22.11.2010, 13:00
PGP Desktop 10.0.x before 10.0.3 SP2 and 10.1.0 before 10.1.0 SP1 does not properly implement the "Decrypt/Verify File via Right-Click" functionality for multi-packet OpenPGP messages that represent multi-message input, which allows remote attackers to spoof signed data by concatenating an additional message to the end of a legitimately signed message, related to a "piggy-back" or "unsigned data injection" issue.Enginsight
| Vendor | Product | Version |
|---|---|---|
| pgp | desktop_for_windows | 𝑥 ≤ 10.0.3 |
| pgp | desktop_for_windows | 10.0.0 |
| pgp | desktop_for_windows | 10.0.1 |
| pgp | desktop_for_windows | 10.0.2 |
| pgp | desktop_for_windows | 10.0.3 |
| pgp | desktop_for_windows | 10.1.0 |
| pgp | desktop_for_mac | 𝑥 ≤ 10.0.3 |
| pgp | desktop_for_mac | 10.0.0 |
| pgp | desktop_for_mac | 10.0.1 |
| pgp | desktop_for_mac | 10.0.2 |
| pgp | desktop_for_mac | 10.0.3 |
| pgp | desktop_for_mac | 10.1.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References