{"id":"CVE-2011-3185","aliases":["EUVD-2011-3152","GHSA-qcwp-776m-mf57"],"status":"published","title":"gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute...","description":"gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04794,"percentile":0.91999,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2011-08-29T17:00:00Z","modified":"2026-06-16T23:32:49Z","products":[{"vendor":"pidgin","product":"pidgin"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/69342","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2011/08/22/10","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/519391/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://developer.pidgin.im/viewmtn/revision/info/5749f9193063800d27bef75c2388f6f9cc2f7f37","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://pidgin.im/news/security/?id=55","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/45663","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/08/22/7","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2011/08/22/","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2011/08/22/12","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.insomniasec.com/advisories/ISVA-110822.1.htm","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://developer.pidgin.im/viewmtn/revision/diff/29484df15413fe3bbd21bbfcef26a55362055a81/with/5749f9193063800d27bef75c2388f6f9cc2f7f37/pidgin/gtkutils.c","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://www.securityfocus.com/bid/49268","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18324","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://securitytracker.com/id?1025961","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3185"},{"url":"http://www.openwall.com/lists/oss-security/2011/08/22"},{"url":"https://github.com/advisories/GHSA-qcwp-776m-mf57"}],"sources":{"cve":[{"id":"CVE-2011-3185","description":"gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message.","status":"published","published":"2011-08-29T17:00:00Z","modified":"2024-08-06T23:22:27.751Z","updated_at":"2026-11-02T14:35:37.324501Z"}],"euvd":[{"id":"EUVD-2011-3152","description":"gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message.","status":"published","published":"2011-08-29T17:00:00Z","modified":"2024-08-06T23:22:27Z","updated_at":"2026-11-03T01:39:52.582864Z"}],"ghsa":[{"id":"GHSA-qcwp-776m-mf57","title":"gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute...","description":"gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message.","status":"published","published":"2022-05-14T02:54:56Z","modified":"2025-04-11T03:51:10Z","cwes":["CWE-20"],"updated_at":"2026-11-02T15:01:09.113063Z"}],"nvd":[{"id":"CVE-2011-3185","description":"gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message.","status":"published","published":"2011-08-29T17:55:01.157Z","modified":"2026-06-16T23:32:49.493Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:09.988332Z"}]}}