CVE-2012-1257

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain...

5.5 MediumPublic exploit

CVE-2012-1257 is a medium vulnerability (CVSS 5.5) in Pidgin, published November 20, 2019. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.74%, the 54th percentile. No source names a fixed version.

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

0.74%Down 1.1 points since Feb 4, 2022

What each source reports

NVD Score used 5.5

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.

Record: CVE-2012-1257
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-319
Updated: 2026-11-02

CVE List No score

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.

Record: CVE-2012-1257
Updated: 2026-11-02

EUVDEUVD-2012-1283 No score

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.

Record: EUVD-2012-1283
Updated: 2026-11-03

GitHub AdvisoriesGHSA-37jx-v87h-x8gc 5.5

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain...

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.

Record: GHSA-37jx-v87h-x8gc
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-319
Updated: 2026-11-02

OSV 5.5

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.

Record: CVE-2012-1257
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVDEBIAN-CVE-2012-1257 5.5

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.

Record: DEBIAN-CVE-2012-1257
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2012-1257 5.5

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.

Record: UBUNTU-CVE-2012-1257
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

Affected products

pidgin

Affected packages

Affected packages
Package	Affected	Fixed
`pidgin` Debian:12	All versions, plus listed versions 2.14.12-12.14.12-1.12.14.12-1.1~exp12.14.13-12.14.13-22.14.14-1	None known
`pidgin` Debian:13	All versions, plus listed versions 2.14.14-1	None known
`pidgin` Debian:14	All versions, plus listed versions 2.14.14-1	None known
`pidgin` Ubuntu:14.04:LTS	All versions, plus listed versions 1:2.10.7-0ubuntu4.11:2.10.7-0ubuntu4.21:2.10.9-0ubuntu11:2.10.9-0ubuntu21:2.10.9-0ubuntu3 Show 4 moreShow less 1:2.10.9-0ubuntu3.11:2.10.9-0ubuntu3.21:2.10.9-0ubuntu3.31:2.10.9-0ubuntu3.4	None known

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	libpurple 2.8.10 - OTR Information Disclosure	2012-02-25

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Attack profile

How easy it is to exploit

What an attacker can affect

Exploit likelihood

What each source reports

Affected products

Affected packages

Public exploits

History

References