Security Advisory
CVE-2018-15586
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Enigmail before 2.0.6 is prone to to OpenPGP signatures being spoofed for arbitrary messages using a PGP/INLINE signature wrapped within a specially crafted multipart HTML email.