SUSE CVE-2018-15586

Enigmail before 2.0.6 is prone to to OpenPGP signatures being spoofed for arbitrary messages using a PGP/INLINE signature wrapped within a specially crafted multipart HTML email...

CVE-2018-15586

Summary: CVE-2018-15586 affects Enigmail before 2.0.6, where OpenPGP signatures can be spoofed when a PGP/INLINE signature is wrapped in a specially crafted multipart HTML email. This vulnerability enables manipulation of signature verification for arbitrary messages. Affected: Enigmail plugin (u...