Improper input validation in Freedesktop Telepathy Gabble

CVE-2011-1000

jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.029 (85.5th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References