CVEvulnerability
CVE-2011-3635
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-10-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias (aka nickname).
Affected configurations
• gnome empathy (<= 3.2.1)
• gnome empathy 0.1
• gnome empathy 0.2
• gnome empathy 0.3
• gnome empathy 0.4
• gnome empathy 0.5
• gnome empathy 0.6
• gnome empathy 0.7
• gnome empathy 0.8
• gnome empathy 0.9
• gnome empathy 0.11
• gnome empathy 0.12
• gnome empathy 0.13
• gnome empathy 0.14
• gnome empathy 0.21.1
• gnome empathy 0.21.2
• gnome empathy 0.21.3
• gnome empathy 0.21.4
• gnome empathy 0.21.5
• gnome empathy 0.21.5.1
• gnome empathy 0.21.5.2
• gnome empathy 0.21.90
• gnome empathy 0.21.91
• gnome empathy 0.22.0
• gnome empathy 0.22.1
• gnome empathy 0.23.1
• gnome empathy 0.23.2
• gnome empathy 0.23.3
• gnome empathy 0.23.4
• gnome empathy 2.23.6
• gnome empathy 2.23.90
• gnome empathy 2.23.91
• gnome empathy 2.23.92
• gnome empathy 2.24.0
• gnome empathy 2.24.1
• gnome empathy 2.25.2
• gnome empathy 2.25.3
• gnome empathy 2.25.4
• gnome empathy 2.25.90
• gnome empathy 2.25.91
• gnome empathy 2.25.92
• gnome empathy 2.26.0
• gnome empathy 2.26.0.1
• gnome empathy 2.26.1
• gnome empathy 2.26.2
• gnome empathy 2.27.1
• gnome empathy 2.27.1.1
• gnome empathy 2.27.2
• gnome empathy 2.27.3
• gnome empathy 2.27.4
• gnome empathy 2.27.5
• gnome empathy 2.27.91
• gnome empathy 2.27.91.1
• gnome empathy 2.27.92
• gnome empathy 2.28.0
• gnome empathy 2.28.0.1
• gnome empathy 2.28.1
• gnome empathy 2.28.1.1
• gnome empathy 2.28.1.2
• gnome empathy 2.28.2
… and 74 more
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://git.gnome.org/browse/empathy/commit/?id=739aca418457de752be13721218aaebc74bd9d36 Patch
- http://osvdb.org/76485 osvdb.org
- http://secunia.com/advisories/46510 Vendor Advisory
- http://secunia.com/advisories/46939 secunia.com
- http://www.securityfocus.com/bid/50323 www.securityfocus.com
- https://bugzilla.gnome.org/show_bug.cgi?id=662035 Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=747599 Patch
- http://git.gnome.org/browse/empathy/commit/?id=739aca418457de752be13721218aaebc74bd9d36 Patch
- http://osvdb.org/76485 osvdb.org
- http://secunia.com/advisories/46510 Vendor Advisory
- http://secunia.com/advisories/46939 secunia.com
- http://www.securityfocus.com/bid/50323 www.securityfocus.com
- https://bugzilla.gnome.org/show_bug.cgi?id=662035 Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=747599 Patch