Information Exposure The advisory has been revoked - it doesn't affect any version of package stardict  (opens in a new tab)


Threat Intelligence

EPSS
0.33% (72nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-DEBIAN11-STARDICT-538599
  • published30 Jun 2009
  • disclosed30 Jun 2009

Introduced: 30 Jun 2009

CVE-2009-2260  (opens in a new tab)
CWE-200  (opens in a new tab)

Amendment

The Debian security team deemed this advisory irrelevant for Debian:11.

NVD Description

Note: Versions mentioned in the description apply only to the upstream stardict package and not the stardict package as distributed by Debian.

stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network.