CVE-2009-2260
stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a...
stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network.
Exploit likelihood
What each source reports
NVD Score used
stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network.
- Record
CVE-2009-2260- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network.
- Record
CVE-2009-2260- Updated
- 2026-11-02
EUVDEUVD-2009-2256 No score
stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network.
- Record
EUVD-2009-2256- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-58g7-f54v-2jg8 No score
stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a...
stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network.
- Record
GHSA-58g7-f54v-2jg8- Weakness
- CWE-200
- Updated
- 2026-11-02
OSV No score
stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network.
- Record
CVE-2009-2260- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-2260 No score
stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network.
- Record
DEBIAN-CVE-2009-2260- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-2260 is a medium vulnerability (CVSS 5.0) in Stardict, published June 30, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.43%, the 84th percentile. Fixed in stardict 3.0.1-5.
References
securityfocus.com/archive/1/504583
bugs.debian.org/cgi-bin/bugreport.cgi?bug=534731
redhat.com/archives/fedora-package-announce/2010-January/msg00121.html
openwall.com/lists/oss-security/2025/08/04/1
nvd.nist.gov/vuln/detail/CVE-2009-2260
github.com/advisories/GHSA-58g7-f54v-2jg8
security-tracker.debian.org/tracker/CVE-2009-2260