Email Encryption Vulnerability in GNOME Evolution by Red Hat

CVE-2013-4166

What is CVE-2013-4166?

A vulnerability exists in GNOME Evolution and Evolution Data Server that arises from the gpg_ctx_add_recipient function. This flaw does not accurately select the appropriate GPG key for email encryption, potentially resulting in emails being encrypted with incorrect keys. Consequently, this may enable remote attackers to gain unauthorized access to sensitive information by exploiting this error in key selection.

References