CVE-2017-17843 : Security Advisory and Response

A vulnerability has been found in Enigmail version 1.9.9 and earlier, allowing attackers to manipulate the use of a specific public key for encryption.

Understanding CVE-2017-17843

What is CVE-2017-17843?

This vulnerability in Enigmail versions prior to 1.9.9 enables attackers to exploit incorrect regular expressions, leading to the manipulation of a specific public key for encryption.

The Impact of CVE-2017-17843

This issue allows attackers to perform a homograph attack by modifying the Full Name field, potentially triggering the use of an unintended public key for encryption.

Technical Details of CVE-2017-17843

Vulnerability Description

The vulnerability arises from the incorrect usage of regular expressions to extract an email address from a comma-separated list, enabling attackers to manipulate the public key used for encryption.

Affected Systems and Versions

Product: Enigmail
Versions affected: 1.9.9 and earlier

Exploitation Mechanism

Attackers can exploit this vulnerability by modifying the Full Name field and executing a homograph attack, potentially leading to the use of an unintended public key for encryption.

Mitigation and Prevention

Immediate Steps to Take

Update Enigmail to version 1.9.9 or later to mitigate the vulnerability.
Be cautious of unexpected modifications to the Full Name field in Enigmail.

Long-Term Security Practices

Regularly update software to the latest versions to address known vulnerabilities.
Educate users on social engineering tactics like homograph attacks to enhance awareness.

Patching and Updates

Ensure timely installation of security patches and updates provided by Enigmail to address vulnerabilities.