The announcing team's logo for the vulnerability, metaphorically representing plaintext leaking out of an encryption 'envelope'.
Efail, also written EFAIL, is a security hole in email systems with which content can be transmitted in encrypted form. This gap allows attackers to access the decrypted content of an email if it contains active content like HTML[1] or JavaScript, or if loading of external content has been enabled in the client. Affected email clients include Gmail, Apple Mail, and Microsoft Outlook.[1]
Two related Common Vulnerabilities and Exposures IDs, CVE-2017-17688 and CVE-2017-17689, have been issued. The security gap was made public on 13 May 2018 by Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky and Jörg Schwenk as part of a contribution to the 27th USENIX Security Symposium, Baltimore, August 2018.
As a result of the vulnerability, the content of an attacked encrypted email can be transmitted to the attacker in plain text by a vulnerable email client. The used encryption keys are not disclosed.
^ ab"Decade-old Efail flaws can leak plaintext of PGP- and S/MIME-encrypted emails". arstechnica.com. 2018-05-14.
Efail, also written EFAIL, is a security hole in email systems with which content can be transmitted in encrypted form. This gap allows attackers to access...
EFAIL, a security hole in encrypted email delivery systems Efail Fach Efail Isaf Cae Llety-yr-efail This disambiguation page lists articles associated...
Taf. The former Barry Railway ran nearby. Efail Isaf has a village hall Efail Isaf derives from the Welsh efail, meaning forge and isaf, meaning lower....
encrypted emails—uninstall now [Updated]". arstechnica.com. May 14, 2018. "EFAIL". efail.de. Retrieved May 18, 2018. "Cannot decrypt PGP Zip files created with...
The Efail Fach television relay station is sited on a hill west of the villages of Efail Fach, Cwm Pelenna and Tonmawr. It was originally built in the...
Communicator. "Why HTML is Inappropriate for E-Mail". www.avernus.com. "EFAIL". efail.de. Retrieved 2021-01-05. "gnu.org". www.gnu.org. "The Mutt E-Mail Client:...
Efail Isaf railway station was a former railway station in Efail Isaf in south Wales. It was on the Barry Railway between Tonteg and Wenvoe, which ran...
floor near Penybontfawr and then runs north of Llanrhaeadr-ym-Mochnant and Efail-rhyd on the north-east of the Tanat Valley. The aqueducts are largely underground...
Pontypridd, comprising the adjoining principal settlements of – Beddau, Efail Isaf, Llantwit Fardre, Ton-Teg, Tyn-y-Nant and Upper Church Village. Church...
started at Port Talbot docks. B4287 B4434 at Neath A4107 at Pontrhydyfen via Efail-fach B4288 (defunct) A48 in Neath A465 (now A4109) in Aberdulais It is not...
sometimes give higher spam scores to HTML messages.[citation needed] In 2018 EFAIL was unveiled, a severe vulnerability which could disclose the actual content...
station in Creigiau in south Wales. It was on the Barry Railway between Efail Isaf and Wenvoe, which ran broadly north–south through Creigiau. To the...
there were three quarries on Moel y Fen, 1 on Mynydd Hawdref (just west of Efail-fach), 2 on east slopes of Foel Fynyddau, 2 on the south slopes of Mynydd...
to the east of the town of Neath. The community includes the villages of Efail-fach, Tonmawr and Pontrhydyfen. According to the 2011 UK Census, the population...
troops. The first protests led by "Rebecca" destroyed the toll-gates at Yr Efail Wen in two attacks in Carmarthenshire in 1839. These were believed to be...
Forge Side (Welsh: Ger yr Efail) was the site of an ironworks started in 1836. The development was soon abandoned, but resumed in 1859. A settlement of...
Global Information