CVE-2013-4166

The gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data Server 3.9.5 and earlier does not properly select the GPG key to use for email encryption, which might cause the email to be encrypted with the wrong key and allow remote attackers to obtain sensitive information.

• CWE-200

• http://rhn.redhat.com/errata/RHSA-2013-1540.htmlThird Party Advisory
• http://seclists.org/oss-sec/2013/q3/191Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=973728Issue Tracking, Third Party Advisory
• https://git.gnome.org/browse/evolution-data-server/commit/?h=gnome-3-8&id=f7059bb37dcce485d36d769142ec9515708d8ae5Patch, Vendor Advisory
• https://git.gnome.org/browse/evolution-data-server/commit/?id=5d8b92c622f6927b253762ff9310479dd3ac627dPatch, Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1540.htmlThird Party Advisory
• http://seclists.org/oss-sec/2013/q3/191Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=973728Issue Tracking, Third Party Advisory
• https://git.gnome.org/browse/evolution-data-server/commit/?h=gnome-3-8&id=f7059bb37dcce485d36d769142ec9515708d8ae5Patch, Vendor Advisory
• https://git.gnome.org/browse/evolution-data-server/commit/?id=5d8b92c622f6927b253762ff9310479dd3ac627dPatch, Vendor Advisory

Published

Feb 6, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-4160Little CMS (lcms2) before 2.5, as used in OpenJDK 7 and poss…
• CVE-2013-4161gksu-polkit-0.0.3-6.fc18 was reported as fixing the issue in…7.8
• CVE-2013-4162The udp_v6_push_pending_frames function in net/ipv6/udp.c in…
• CVE-2013-4163The ip6_append_data_mtu function in net/ipv6/ip6_output.c in…
• CVE-2013-4164Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p48…
• CVE-2013-4165The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.…
• CVE-2013-4167Cross-site scripting (XSS) vulnerability in CMS Made Simple …
• CVE-2013-4168Cross-site scripting (XSS) vulnerability in SmokePing 2.6.9 …6.1
• CVE-2013-4169GNOME Display Manager (gdm) before 2.21.1 allows local users…
• CVE-2013-4170In general, Ember.js escapes or strips any user-supplied con…6.1
• CVE-2013-4171Multiple cross-site scripting (XSS) vulnerabilities in Apach…
• CVE-2013-4172The Red Hat CloudForms Management Engine 5.1 allow remote ad…