CVE-2011-3185

gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute...

9.3 High

gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message.

Exploit likelihood

4.79%Up 1.0 points since Feb 4, 2022

What each source reports

NVD Score used 9.3

gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message.

Record: CVE-2011-3185
CVSS 2.0: 9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message.

Record: CVE-2011-3185
Updated: 2026-11-02

EUVDEUVD-2011-3152 No score

gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message.

Record: EUVD-2011-3152
Updated: 2026-11-03

GitHub AdvisoriesGHSA-qcwp-776m-mf57 No score

gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute...

gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message.

Record: GHSA-qcwp-776m-mf57
Weakness: CWE-20
Updated: 2026-11-02

Affected products

pidgin

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-3185 is a high vulnerability (CVSS 9.3) in Pidgin, published August 29, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.79%, the 91st percentile. No source names a fixed version.

References

Show 10 moreShow less