• Home
  • News
  • Vulnerabilities in PGP/GPG Email Encryption Plugins Discovered, Users Advised to Uninstall Immediately

Vulnerabilities in PGP/GPG Email Encryption Plugins Discovered, Users Advised to Uninstall Immediately

Vulnerabilities in PGP/GPG Email Encryption Plugins Discovered, Users Advised to Uninstall Immediately

warning has been issued by European security researcher Sebastian Schinzel warning of critical vulnerabilities in PGP/GPG and S/MIME email encryption software that could reveal the plaintext of encrypted emails. Previously sent mails could also be exposed.

The vulnerabilities affect Apple Mail, Mozilla Thunderbird with Enigmail and Microsoft Outlook with GPG4win.

Schinzel tweeted about the flaw late Sunday night, via his Twitter account. A full research paper on the flaw was published on early Monday morning. The paper provides a full description of the vulnerabilities. There are currently no fixes available for the flaw.

The EFAIL attacks exploit vulnerabilities in the OpenPGP and S/MIME standards to reveal the plaintext of encrypted emails. In a nutshell, EFAIL abuses active content of HTML emails, for example externally loaded images or styles, to exfiltrate plaintext through requested URLs. To create these exfiltration channels, the attacker first needs access to the encrypted emails, for example, by eavesdropping on network traffic, compromising email accounts, email servers, backup systems or client computers. The emails could even have been collected years ago.

The attacker changes an encrypted email in a particular way and sends this changed encrypted email to the victim. The victim’s email client decrypts the email and loads any external content, thus exfiltrating the plaintext to the attacker.

Users of PGP/GPG and S/MIME are being told to immediately disable or uninstall PGP_decryption tools and seek other ways, such as Signal, to send and receive sensitive encrypted information.

For detailed information about the vulnerabilities, visit the EFAIL website.

  1. 42391 401394Wonderful site you got here! Please keep updating, I will def read much more. Itll be in my bookmarks so much better update! 316541

  2. 290766 69214really good post, i undoubtedly adore this excellent internet site, carry on it 527058

  3. 810055 335984Do you have a spam issue on this website; I also am a blogger, and I was curious about your situation; many of us have created some nice procedures and we are looking to exchange methods with other folks, why not shoot me an e-mail if interested. 936954

  4. Stromgeaps says:

    [url=https://stromectolgf.com/#]stromectol[/url] stromectol 12mg

  5. ChesterJed says:

    https://stromectolgf.com/# stromectol 15 mg

  6. IverGego says:

    can you buy stromectol over the counter stromectol 3 mg tablets price

  7. RaymondCluth says:

    clomid uk over the counter clomid without prescription

  8. StephenJaf says:

    https://zithromaxforsale.shop/# zithromax over the counter

  9. RickyQuold says:

    [url=https://amoxilforsale.best/#]can you purchase amoxicillin online[/url] buying amoxicillin online

  10. Robertbek says:

    zithromax prescription buy zithromax 500mg online

  11. RaymondCluth says:

    https://buytadalafil.men/# best tadalafil tablets in india

  12. RaymondCluth says:

    https://buymetformin.best/# generic metformin price

  13. maxbet says:

    59826 920729naturally like your website however you need to test the spelling on quite a few of your posts. 242078

  14. MichealUnjug says:

    [url=https://withoutprescription.store/#]amoxicillin without a doctor’s prescription[/url] cvs prescription prices without insurance

  15. MichealUnjug says:

    [url=https://cipro.best/#]ciprofloxacin order online[/url] where can i buy cipro online

  16. DanielIdeof says:

    [url=https://doxycyclineonline.store/#]doxycycline hydrochloride[/url] doxycycline without prescription

  17. Robertorox says:

    [url=https://stromectoltrust.com/#]stromectol[/url] stromectol 12 mg tablets

  18. AllanPrure says:

    https://stromectoltrust.com/# stromectol 12 mg tablets

  19. GeraldSmela says:

    [url=https://erectionpills.shop/#]best ed treatment[/url] ed drug prices

  20. GeraldSmela says:

    [url=https://erectionpills.shop/#]how to cure ed[/url] medicine erectile dysfunction

  21. GeraldSmela says:

    [url=https://erectionpills.shop/#]medications for ed[/url] ed pills online

  22. GeraldSmela says:

    [url=https://erectionpills.shop/#]what are ed drugs[/url] new ed treatments

  23. Georgesip says:

    http://stromectolbestprice.com/# ivermectin 3 mg tablet

  24. JeffreyCer says:

    http://stromectolbestprice.com/# ivermectin dosage dogs

  25. JeffreyCer says:

    http://stromectolbestprice.com/# ivermectin budgies

  26. Gerardwhelm says:

    https://drugsbestprice.com/# online meds for ed

  27. Dustinaxoft says:

    https://medrxfast.com/# how to get prescription drugs without doctor

  28. Dustinaxoft says:

    https://medrxfast.com/# buy prescription drugs from india

  29. Thomasdrino says:

    https://medrxfast.com/# canadian online drugs

  30. Dustinaxoft says:

    https://medrxfast.com/# meds online without doctor prescription

  31. Dustinaxoft says:

    https://medrxfast.com/# buy prescription drugs from canada

Leave a Reply

Your email address will not be published.