Cross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias (aka nickname) in a /me event, a different vulnerability than CVE-2011-3635.
Metrics
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact None
Integrity Impact Partial
Availability Impact None
AV:N/AC:M/Au:N/C:N/I:P/A:N
This CVE is not in the KEV list.
Key SSVC decision points have not yet been added.
Affected Vendors & Products
Vendors | Products |
---|---|
Gnome |
|
Configuration 1 [-]
|
No data.
References
Link | Providers |
---|---|
https://bugzilla.gnome.org/show_bug.cgi?id=662035 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2011-10-23T10:00:00Z
Updated: 2024-09-16T20:41:49.140Z
Reserved: 2011-10-22T00:00:00Z
Link: CVE-2011-4170
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2011-10-23T10:55:03.703
Modified: 2012-05-13T04:00:00.000
Link: CVE-2011-4170
Redhat
No data.