CVE-2011-1000

Published: Feb 19, 2011Modified: Apr 29, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.

Affected (27)

Products: Freedesktop: Telepathy Gabble

1 product

Telepathy Gabble

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Freedesktop Telepathy Gabble	Version 0.11.1
Freedesktop Telepathy Gabble	Version 0.11.2
Freedesktop Telepathy Gabble	Version 0.11.3
Freedesktop Telepathy Gabble	Version 0.11.4
Freedesktop Telepathy Gabble	Version 0.11.5
Freedesktop Telepathy Gabble	Version 0.11.6
Freedesktop Telepathy Gabble	Version 0.11

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Freedesktop Telepathy Gabble	Version 0.10.1
Freedesktop Telepathy Gabble	Version 0.10.2
Freedesktop Telepathy Gabble	Version 0.10.3
Freedesktop Telepathy Gabble	Version 0.10.4
Freedesktop Telepathy Gabble	Version 0.10

Configuration C

15 vulnerable

Vulnerable Software	Affected Versions
Freedesktop Telepathy Gabble	Version 0.8.10
Freedesktop Telepathy Gabble	Version 0.8.11
Freedesktop Telepathy Gabble	Version 0.8.12
Freedesktop Telepathy Gabble	Version 0.8.13
Freedesktop Telepathy Gabble	Version 0.8.14
Freedesktop Telepathy Gabble	Version 0.8.1
Freedesktop Telepathy Gabble	Version 0.8.2
Freedesktop Telepathy Gabble	Version 0.8.3
Freedesktop Telepathy Gabble	Version 0.8.4
Freedesktop Telepathy Gabble	Version 0.8.5
Freedesktop Telepathy Gabble	Version 0.8.6
Freedesktop Telepathy Gabble	Version 0.8.7
Freedesktop Telepathy Gabble	Version 0.8.8
Freedesktop Telepathy Gabble	Version 0.8.9
Freedesktop Telepathy Gabble	Version 0.8

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (44)

http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054324.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054409.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054575.html

Source: secalert@redhat.com

http://secunia.com/advisories/43316

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/43369

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/43404

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/43485

Source: secalert@redhat.com

http://secunia.com/advisories/43545

Source: secalert@redhat.com

http://secunia.com/advisories/44023

Source: secalert@redhat.com

http://www.debian.org/security/2011/dsa-2169

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/02/17/4

Source: secalert@redhat.com

Patch

http://www.openwall.com/lists/oss-security/2011/02/17/7

Source: secalert@redhat.com

Patch

http://www.securityfocus.com/bid/46440

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1067-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0412

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0428

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0537

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0572

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2011/0901

Source: secalert@redhat.com

https://bugs.freedesktop.org/show_bug.cgi?id=34048

Source: secalert@redhat.com

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/65523

Source: secalert@redhat.com

https://hermes.opensuse.org/messages/7848248

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054324.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054409.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054575.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43316

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/43369

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/43404

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/43485

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43545

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/44023

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2011/dsa-2169

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2011/02/17/4

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.openwall.com/lists/oss-security/2011/02/17/7

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/bid/46440

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1067-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0412

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0428

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0537

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0572

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0901

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.freedesktop.org/show_bug.cgi?id=34048

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/65523

Source: af854a3a-2127-422b-91ae-364da2661108

https://hermes.opensuse.org/messages/7848248

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.