CVEvulnerability

CVE-2011-1000

6.4 MEDIUM Published 2011-02-19 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-02-19
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-20

Description

jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.

Affected configurations

• freedesktop telepathy gabble 0.11 • freedesktop telepathy gabble 0.11.1 • freedesktop telepathy gabble 0.11.2 • freedesktop telepathy gabble 0.11.3 • freedesktop telepathy gabble 0.11.4 • freedesktop telepathy gabble 0.11.5 • freedesktop telepathy gabble 0.11.6 • freedesktop telepathy gabble 0.10 • freedesktop telepathy gabble 0.10.1 • freedesktop telepathy gabble 0.10.2 • freedesktop telepathy gabble 0.10.3 • freedesktop telepathy gabble 0.10.4 • freedesktop telepathy gabble 0.8 • freedesktop telepathy gabble 0.8.1 • freedesktop telepathy gabble 0.8.2 • freedesktop telepathy gabble 0.8.3 • freedesktop telepathy gabble 0.8.4 • freedesktop telepathy gabble 0.8.5 • freedesktop telepathy gabble 0.8.6 • freedesktop telepathy gabble 0.8.7 • freedesktop telepathy gabble 0.8.8 • freedesktop telepathy gabble 0.8.9 • freedesktop telepathy gabble 0.8.10 • freedesktop telepathy gabble 0.8.11 • freedesktop telepathy gabble 0.8.12 • freedesktop telepathy gabble 0.8.13 • freedesktop telepathy gabble 0.8.14

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References