CVE-2011-1000
Published: 16 February 2011
jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
telepathy-gabble Launchpad, Ubuntu, Debian |
dapper |
Does not exist
|
| hardy |
Ignored
(end of life)
|
|
| karmic |
Released
(0.8.7-1ubuntu1.1)
|
|
| lucid |
Released
(0.8.12-0ubuntu1.1)
|
|
| maverick |
Released
(0.10.0-1ubuntu0.1)
|
|
| natty |
Released
(0.11.6-1ubuntu2)
|
|
| oneiric |
Released
(0.11.6-1ubuntu2)
|
|
| upstream |
Needs triage
|
|
|
Patches: upstream: http://git.collabora.co.uk/?p=telepathy-gabble.git;a=commitdiff;h=158c988 upstream: http://git.collabora.co.uk/?p=telepathy-gabble.git;a=commitdiff;h=5b9ee62 upstream: http://git.collabora.co.uk/?p=telepathy-gabble.git;a=commitdiff;h=ed73e1f |
||
References
- http://lists.freedesktop.org/archives/telepathy/2011-February/005272.html
- http://lists.freedesktop.org/archives/telepathy/2011-February/005273.html
- http://lists.freedesktop.org/archives/telepathy/2011-February/005274.html
- https://bugs.freedesktop.org/show_bug.cgi?id=34048
- https://ubuntu.com/security/notices/USN-1067-1
- https://www.cve.org/CVERecord?id=CVE-2011-1000
- NVD
- Launchpad
- Debian