CVE-2007-1267

CVE-2007-1267 describes a vulnerability in Sylpheed 2.2.7 and earlier, where improper handling of the --status-fd argument when invoking GnuPG prevents the email client from correctly distinguishing between signed and unsigned parts of OpenPGP messages with multiple components. This flaw allows remote attackers to forge message content without detection, impacting message integrity. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N), it is a medium severity vulnerability that can be exploited over the network with low complexity and no authentication, leading to a potential integrity compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.