What’s Vulnerable › Vulnerabilities

CVE-2011-4922

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2012-08-08 · updated 2026-06-16
• Weakness: CWE-200

Description

cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation of memory contents.

Affected products

• Pidgin: through 2.7.9; 2.0.0, 2.0.1, 2.0.2, 2.1.0, 2.1.1, 2.2.0 (+38)

References

• http://hg.pidgin.im/pidgin/main/rev/8c850977cb42
• http://openwall.com/lists/oss-security/2012/01/04/13
• http://www.pidgin.im/news/security/?id=50
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18223
• http://hg.pidgin.im/pidgin/main/rev/8c850977cb42
• http://openwall.com/lists/oss-security/2012/01/04/13
• http://www.pidgin.im/news/security/?id=50
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18223

Get alerted when CVE-2011-4922 or the next vulnerability affects your stack