CVE-2011-4922

Description

cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users to obtain sensitive information by reading a core file or other representation of memory contents.

Affected packages (1)

• Debian/pidginfrom 0, < 2.7.11-1

References (1)

• ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2011-4922