Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Visual truncation vulnerability in Windows Privacy Tray (WinPT) 1.2.0 allows user-assisted remote attackers to install a key listed under the wrong user ID, and possibly cause the user to encrypt a victim's correspondence with this attacker-supplied key, via a key ID composed of the attacker's user ID, space characters, an invalid WinPT message, additional space characters, and the victim's user ID.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WindowsPT用户ID密钥欺骗漏洞
Vulnerability Description
Windows Privacy Tray是GnuPG的图形任务栏前端，集成了密钥管理和文件、剪贴板加密功能。 WinPT在显示密钥时存在问题，攻击者可能利用此漏洞欺骗用户ID。 在某些情况下密钥用户ID是在固定大小的窗口中显示的，如果密钥的用户ID中使用了大量的数据，就会截短显示多余的用户ID数据。这允许攻击者诱骗用户在某些操作中(包括密钥导入、签名、编辑、列出签名等)使用隐藏了额外用户ID的密钥，导致以攻击者的密钥而不是合法的密钥非预期地加密敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A