CVE-2011-4922
cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation of memory contents.
- Score
- CVSS 2.0 2.1 Low
- Status
- Modified - secalert@redhat.com
- Published
- 2012-08-08
- Last modified
- 2024-08-07
- Weaknesses
- CWE-200
Affected products
References
- http://hg.pidgin.im/pidgin/main/rev/8c850977cb42
- http://openwall.com/lists/oss-security/2012/01/04/13
- http://www.pidgin.im/news/security/?id=50
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18223
