CVE-2011-4922: Infoleak
cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation of memory contents.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4922?
The severity of CVE-2011-4922 is categorized as medium due to the potential exposure of sensitive encryption key data.
How do I fix CVE-2011-4922?
To fix CVE-2011-4922, upgrade Pidgin to version 2.7.10 or later where the vulnerability has been addressed.
Which versions of Pidgin are affected by CVE-2011-4922?
CVE-2011-4922 affects Pidgin versions prior to 2.7.10, including versions such as 2.5.0 to 2.7.9.
What type of vulnerability is CVE-2011-4922?
CVE-2011-4922 is a local information disclosure vulnerability that allows unauthorized access to sensitive encryption keys from memory.
Can CVE-2011-4922 be exploited remotely?
No, CVE-2011-4922 requires local access to the system to exploit the vulnerability.