CVE-2005-3256: Enigmail

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, which allows parties with that key to decrypt the message.

Affected products

• Enigmail Enigmail: up to and including 0.92.0

Published 2005-10-18. Last modified 2026-06-16.