CVE-2011-1000: Freedesktop Telepathy Gabble

Medium severity, CVSS 6.4. EPSS: 2.9% chance of exploitation in the next 30 days.

jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.

Affected products

• Freedesktop Telepathy Gabble: version 0.11 only; version 0.11.1 only; version 0.11.2 only; version 0.11.3 only; version 0.11.4 only; version 0.11.5 only; …

Published 2011-02-19. Last modified 2026-06-16.