low2.1
CVE-2011-4922
cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitiv…
Impact
cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation of memory contents.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pidgin | Pidgin | through 2.7.9 Versions 2.0.0, 2.0.1, 2.0.2, 2.1.0, 2.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://hg.pidgin.im/pidgin/main/rev/8c850977cb42
- http://openwall.com/lists/oss-security/2012/01/04/13
- http://www.pidgin.im/news/security/?id=50
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18223
- http://hg.pidgin.im/pidgin/main/rev/8c850977cb42
- http://openwall.com/lists/oss-security/2012/01/04/13
- http://www.pidgin.im/news/security/?id=50
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18223