Information disclosure in Stardict
CVE-2009-2260
stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network.
Vulnerability class: Information Disclosure
EPSS: 0.021 (79.5th percentile) — read the EPSS interpretation.
Affected products
- Stardict — versions 3.0.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (vendor-advisory, x_refsource_FEDORA)
- af854a3a-2127-422b-91ae-364da2661108