Back to Database
Status published
Medium
CVE-2011-3635
Cross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy-theme-adium.c...
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias (aka nickname).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-3635
Credits & Attribution
No credits recorded in the NVD database.
References
- http://secunia.com/advisories/46510
- https://bugzilla.redhat.com/show_bug.cgi?id=747599
- http://www.securityfocus.com/bid/50323
- http://osvdb.org/76485
- https://bugzilla.gnome.org/show_bug.cgi?id=662035
- http://secunia.com/advisories/46939
- http://git.gnome.org/browse/empathy/commit/?id=739aca418457de752be13721218aaebc74bd9d36
More from gnome
View All →CVE-2022-48622
In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows...
Unknown
0
CVE-2022-37290
GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename...
Unknown
0
CVE-2022-29536
In GNOME Epiphany before 41.4 and 42.x before 42.2, an...
High
7.5
CVE-2022-27811
GNOME OCRFeeder before 0.8.4 allows OS command injection via shell...
Critical
9.8
CVE-2021-46829
GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer...
High
7.8
Affected Vendor
gnome
View all reports →Affected Software
empathy
Vulnerable Versions:
0, 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.8, 0.9, 0.11, 0.12, 0.13, 0.14, 0.21.1, 0.21.2, 0.21.3, 0.21.4, 0.21.5, 0.21.5.1, 0.21.5.2, 0.21.90, 0.21.91, 0.22.0, 0.22.1, 0.23.1, 0.23.2, 0.23.3, 0.23.4, 2.23.6, 2.23.90, 2.23.91, 2.23.92, 2.24.0, 2.24.1, 2.25.2, 2.25.3, 2.25.4, 2.25.90, 2.25.91, 2.25.92, 2.26.0, 2.26.0.1, 2.26.1, 2.26.2, 2.27.1, 2.27.1.1, 2.27.2, 2.27.3, 2.27.4, 2.27.5, 2.27.91, 2.27.91.1, 2.27.92, 2.28.0, 2.28.0.1, 2.28.1, 2.28.1.1, 2.28.1.2, 2.28.2, 2.29.1, 2.29.2, 2.29.3, 2.29.4, 2.29.5, 2.29.5.1, 2.29.6, 2.29.90, 2.29.91, 2.29.91.1, 2.29.91.2, 2.29.92, 2.29.93, 2.30.0, 2.30.0.1, 2.30.0.2, 2.30.1, 2.30.1.1, 2.30.2, 2.30.3, 2.31.1, 2.31.2, 2.31.3, 2.31.4, 2.31.5, 2.31.5.1, 2.31.6, 2.31.90, 2.31.91, 2.31.92, 2.32.0, 2.32.0.1, 2.32.1, 2.32.2, 2.33.1, 2.33.2, 2.33.3, 2.33.4, 2.34.0, 2.91.0, 2.91.1, 2.91.2, 2.91.3, 2.91.3.1, 2.91.4, 2.91.4.1, 2.91.4.2, 2.91.4.3, 2.91.5, 2.91.5.1, 2.91.6, 2.91.6.1, 2.91.90, 2.91.90.1, 2.91.90.2, 2.91.91, 2.91.91.1, 2.91.92, 2.91.93, 3.0.0, 3.0.1, 3.0.2, 3.1.1, 3.1.2, 3.1.2.1, 3.1.3, 3.1.4, 3.1.5, 3.1.5.1, 3.1.90, 3.1.90.1, 3.1.91, 3.1.92, 3.2.0.1
Timeline
Official Publish:
October 23rd, 2011
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.