CVE-2017-17844

CVE-2017-17844 describes a replay vulnerability in Enigmail versions prior to 1.9.9, affecting Debian and Enigmail products. An attacker can obtain cleartext content by sending an encrypted message to a victim, who then automatically decrypts and re-sends it as quoted text. This medium-severity vulnerability (CVSS 6.5) has a low attack complexity, requiring user interaction, and primarily impacts confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.