| Package | Affected versions | Patched versions |
|---|---|---|
| telepathy gabble | = 0.10= 0.10.1= 0.10.2= 0.10.3= 0.10.4= 0.11= 0.11.1= 0.11.2= 0.11.3= 0.11.4= 0.11.5= 0.11.6= 0.8= 0.8.1= 0.8.10= 0.8.11= 0.8.12= 0.8.13= 0.8.14= 0.8.2= 0.8.3= 0.8.4= 0.8.5= 0.8.6= 0.8.7= 0.8.8= 0.8.9 |
jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free