CVE-2016-10376

Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension

published May 28, 2017

CVSS
—
EPSS
1%
Percentile
66.5
In the wild
Unconfirmed
What it is

Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01153 · 66.5th percentile
Published
2017-05-28T00:00Z
EPSS history
Timeline
  • 28 MAY 00:00Z
    Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension
    cvelistv5