Launchpad.net

CVE 2005-3256

The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, which allows parties with that key to decrypt the message.

See the CVE page on Mitre.org for more details.