CVE-2009-2260

Name	CVE-2009-2260
Description	stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	534731

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
stardict (PTS)	jessie	3.0.1-9.2	fixed
	stretch	3.0.1-9.3	fixed
	bookworm	3.0.7+git20220909+dfsg-4	fixed
	sid, trixie	3.0.7+git20220909+dfsg-6	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Debian Bugs
stardict	source	etch	(not affected)
stardict	source	lenny	3.0.1-4+lenny1
stardict	source	(unstable)	3.0.1-5	low	534731

[etch] - stardict <not-affected> (netdict plugin not yet present)