CVE-2011-3635
N/A
Published: October 23, 2011 at 10:00 AM UTC
Updated: June 16, 2026 at 11:33 PM UTC
1 product affected across 1 vendorEmpathy
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
Cross-site scripting (XSS) vulnerability in the theme_adium_append_message function in empathy-theme-adium.c in the Adium theme in libempathy-gtk in Empathy 3.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted alias (aka nickname).
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 3.2.10.10.110.120.130.140.20.21.10.21.20.21.30.21.40.21.50.21.5.10.21.5.20.21.900.21.910.22.00.22.10.23.10.23.20.23.30.23.40.30.40.50.60.70.80.92.23.62.23.902.23.912.23.922.24.02.24.12.25.22.25.32.25.42.25.902.25.912.25.922.26.02.26.0.12.26.12.26.22.27.12.27.1.12.27.22.27.32.27.42.27.52.27.912.27.91.12.27.922.28.02.28.0.12.28.12.28.1.12.28.1.22.28.22.29.12.29.22.29.32.29.42.29.52.29.5.12.29.62.29.902.29.912.29.91.12.29.91.22.29.922.29.932.30.02.30.0.12.30.0.22.30.12.30.1.12.30.22.30.32.31.12.31.22.31.32.31.42.31.52.31.5.12.31.62.31.902.31.912.31.922.32.02.32.0.12.32.12.32.22.33.12.33.22.33.32.33.42.34.02.91.02.91.12.91.22.91.32.91.3.12.91.42.91.4.12.91.4.22.91.4.32.91.52.91.5.12.91.62.91.6.12.91.902.91.90.12.91.90.22.91.912.91.91.12.91.922.91.933.0.03.0.13.0.23.1.13.1.23.1.2.13.1.33.1.43.1.53.1.5.13.1.903.1.90.13.1.913.1.923.2.0.1
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (7)
x_refsource_CONFIRMPatch
Source: [email protected]
http://git.gnome.org/browse/empathy/commit/?id=739aca418457de752be13721218aaebc74bd9d36Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/46510x_refsource_CONFIRMx_refsource_MISCPatch
Source: [email protected]
https://bugzilla.gnome.org/show_bug.cgi?id=662035Quick Info
StatusMODIFIED
CWE
CWE-79
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card