CVEs-PoC/2017/CVE-2017-17689.md

CVE-2017-17689

Description

The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/giterlizzi/secdb-feeds
• https://github.com/jaads/Efail-malleability-gadget-exploit