Skip to content

CVE-2011-3185

gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute...

9.3 High

CVE-2011-3185 is a high vulnerability (CVSS 9.3) in Pidgin, published August 29, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.79%, the 91st percentile. No source names a fixed version.

gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message.

Exploit likelihood

4.79%Up 1.0 points since Feb 4, 2022

What each source reports

NVD Score used 9.3

gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message.

Record: CVE-2011-3185
CVSS 2.0: 9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message.

Record: CVE-2011-3185
Updated: 2026-11-02

EUVDEUVD-2011-3152 No score

gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message.

Record: EUVD-2011-3152
Updated: 2026-11-03

GitHub AdvisoriesGHSA-qcwp-776m-mf57 No score

gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute...

gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message.

Record: GHSA-qcwp-776m-mf57
Weakness: CWE-20
Updated: 2026-11-02

Affected products

pidgin

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References

Show 10 moreShow less