CVE ID:	CVE-2007-1263
Description:	GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP messages with multiple components, which might allow remote attackers to forge the contents of a message without detection.
Test IDs:	1.3.6.1.4.1.25623.1.0.62244   1.3.6.1.4.1.25623.1.0.58106   1.3.6.1.4.1.25623.1.0.59123   1.3.6.1.4.1.25623.1.0.58121   1.3.6.1.4.1.25623.1.0.65441   1.3.6.1.4.1.25623.1.0.58182   1.3.6.1.4.1.25623.1.0.58084   1.3.6.1.4.1.25623.1.0.59118   1.3.6.1.4.1.25623.1.0.62243   1.3.6.1.4.1.25623.1.0.58131   1.3.6.1.4.1.25623.1.0.59651   1.3.6.1.4.1.25623.1.0.58878
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-1263 BugTraq ID: 22757 http://www.securityfocus.com/bid/22757 Bugtraq: 20070305 CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability (Google Search) http://www.securityfocus.com/archive/1/461958/100/0/threaded Bugtraq: 20070305 CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability (Google Search) http://www.securityfocus.com/archive/1/461958/30/7710/threaded Debian Security Information: DSA-1266 (Google Search) http://www.debian.org/security/2007/dsa-1266 http://fedoranews.org/cms/node/2776 http://fedoranews.org/cms/node/2775 http://www.mandriva.com/security/advisories?name=MDKSA-2007:059 http://www.coresecurity.com/?action=item&id=1687 http://lists.gnupg.org/pipermail/gnupg-users/2007-March/030514.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10496 RedHat Security Advisories: RHSA-2007:0106 http://www.redhat.com/support/errata/RHSA-2007-0106.html RedHat Security Advisories: RHSA-2007:0107 http://www.redhat.com/support/errata/RHSA-2007-0107.html http://www.securitytracker.com/id?1017727 http://secunia.com/advisories/24365 http://secunia.com/advisories/24407 http://secunia.com/advisories/24419 http://secunia.com/advisories/24420 http://secunia.com/advisories/24438 http://secunia.com/advisories/24489 http://secunia.com/advisories/24511 http://secunia.com/advisories/24544 http://secunia.com/advisories/24650 http://secunia.com/advisories/24734 http://secunia.com/advisories/24875 SGI Security Advisory: 20070301-01-P ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc http://securityreason.com/securityalert/2353 SuSE Security Announcement: SUSE-SA:2007:024 (Google Search) http://lists.suse.com/archive/suse-security-announce/2007-Mar/0008.html http://www.trustix.org/errata/2007/0009/ http://www.ubuntu.com/usn/usn-432-1 http://www.ubuntu.com/usn/usn-432-2 http://www.vupen.com/english/advisories/2007/0835