CVE-2017-17844

An issue was discovered in Enigmail before 1.9.9. A remote attacker can obtain cleartext content by sending an encrypted data block that the attacker cannot directly decrypt to a victim, and relying on the victim to automatically decrypt that block and then send it back to the attacker as quoted...

CVE-2017-17844

CVE-2017-17844 affects Enigmail before 1.9.9, an OpenPGP extension for Thunderbird. A remote attacker can cause the victim to decrypt an encrypted block and replay the resulting cleartext as quoted text, exposing plaintext (TBE-01-005 replay). The issue is addressed in vendor advisories; remediat...