CVE-2011-1000
jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.
- EPSS
- 2.9% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- freedesktop:telepathy_gabble
References
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054324.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054409.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054575.html
- http://secunia.com/advisories/43316
- http://secunia.com/advisories/43369