CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.8. It may be remotely exploitable.
CVE
CVE-2007-1265
Severity
HIGH
CVSS
7.8
EPSS
2.05%
Original NVD Description
KMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents KMail from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without detection.