9 March 2007

A serious flaw was found in opensource encryption software GNU Privacy Guard (GPG).

It allows a cybercriminal to launch a phishing attack. The flaw allows to insert text in trusted e-mail. Ivan Arce from Core Security, who discovered the vulnerability says attacker can insert malware or lead user to malicious website. Arce decided to inform of the flaw because it was patched two weeks ago.

It affects email clients like Kmail, Evolution, Sylpheed, Mutt and GNUMail, so its users should install patches as soon as possible.

Source:
http://www.arcabit.com/infobase.html?show=...ion&id=1154