cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation of memory contents.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2012-08-08 03:26
Updated : 2017-09-18 18:34
NVD link : CVE-2011-4922
Mitre link : CVE-2011-4922
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
pidgin
- pidgin