PT-2025-31858 · Stardict+1 · Youdao Plugin+2

Vincent Lefevre · Published 2025-08-04 · Updated 2025-11-15 · CVE-2025-55014

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions StarDict versions 3.0.7+git20220909+dfsg-6

Description The YouDao plugin for StarDict sends X11 selection data to the dict.youdao.com and dict.cn servers via cleartext HTTP.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-402

Related Identifiers

CVE-2025-55014

MGASA-2025-0298

Affected Products

Debian

Stardict

Youdao Plugin

References · 26

• https://security-tracker.debian.org/tracker/CVE-2025-55014 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55014 · Security Note
• https://advisories.mageia.org/MGASA-2025-0298.html · Security Note
• https://ubuntu.com/security/CVE-2025-55014 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0298 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-55014 · Security Note
• https://osv.dev/vulnerability/CVE-2025-55014 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-55014 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-55014 · Vendor Advisory
• https://seclists.org/oss-sec/2025/q3/75 · Note
• https://bugs.mageia.org/show_bug.cgi?id=34533 · Note
• https://openwall.com/lists/oss-security/2025/08/04/1 · Note
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1110370 · Note
• https://t.me/cveNotify/132102 · Telegram Post
• https://news.ycombinator.com/item?id=44872313 · Note