CVE-2009-2260

stardict 3.0.1 - Unauthenticated Exposure of Sensitive Information via Net Dict Clipboard Transmission

Title source: llm

Description

stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network.

References (4)

Core 4

Core References

Mailing List

http://www.openwall.com/lists/oss-security/2025/08/04/1

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/504583

Issue Tracking x_refsource_misc

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534731

Vendor Advisory vendor-advisory x_refsource_fedora

https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00121.html

Scores

EPSS 0.0209

EPSS Percentile 79.4%

Details

CWE

CWE-200

Status published

Products (1)

stardict/stardict 3.0.1

Published Jun 30, 2009

Tracked Since Feb 18, 2026