CVE-2012-2085

CVE-2012-2085 describes a command injection vulnerability in Gajim versions prior to 0.15, specifically within the exec_command function in common/helpers.py. An attacker could exploit this by convincing a user to click a specially crafted href attribute containing shell metacharacters, leading to arbitrary command execution. With a CVSS score of 6.8, this vulnerability is of medium severity, requiring user interaction (user-assisted remote attack) but potentially allowing partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.