medium5.5Public exploit code
CVE-2012-1257
Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- libpurple 2.8.10 - OTR Information Disclosure2012-02-25 · remote · linux · Verified
Impact
Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pidgin | Pidgin | Version 2.10.0 |