Insecure Key Selection in Enigmail Prior to 0.92.1

CVE-2005-3256 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, which allows parties with that key to decrypt the message.

Learn more about our User Device Pen Test.