Sylpheed

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sylpheed:sylpheed:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSylpheed (fcf68f92-b228-56d8-841b-0f97b2f86c5e)
ProductSylpheed (9fba5ea6-c560-54ac-86a7-c49ec5bdd626)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/sylpheed purl2cpe 2026-06-01 10:12:19.211729
pkg:deb/ubuntu/sylpheed purl2cpe 2026-06-01 10:12:19.211731
pkg:github/sylpheed-mail/sylpheed purl2cpe 2026-06-01 10:12:19.211732
pkg:rpm/fedora/sylpheed purl2cpe 2026-06-01 10:12:19.211734
pkg:rpm/opensuse/sylpheed purl2cpe 2026-06-01 10:12:19.211735

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-1267 vulnerable 2026-06-08 04:49:41.923071 Details available
Sylpheed 2.2.7 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Sylpheed from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without detection.
Published: 2007-03-06T20:00:00.000Z
Updated: 2024-08-07T12:50:35.224Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2920 vulnerable 2026-06-08 04:49:07.839450 Details available
Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow remote attackers to bypass the URI check functionality and makes it easier to conduct phishing attacks via a URI that begins with a space character.
Published: 2006-06-09T01:00:00.000Z
Updated: 2024-08-07T18:06:27.208Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.