CVE:CVE-2011-4170
CNNVD:CNNVD-201110-572
Empathy 3.2.1及之前版本的libempathy-gtk的Adium主题的empathy-theme-adium.c的theme_adium_append_message函数中存在跨站脚本攻击漏洞。远程攻击者可借助/me事件中特制的别名（也成为昵称）注入任意web脚本或者HTML。
solution:Upgrade gnome empathy to a higher version than 3.2.1,0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.8,0.9,0.11,0.12,0.13,0.14,0.21.1,0.21.2,0.21.3,0.21.4,0.21.5,0.21.5.1,0.21.5.2,0.21.90,0.21.91,0.22.0,0.22.1,0.23.1,0.23.2,0.23.3,0.23.4,2.23.6,2.23.90,2.23.91,2.23.92,2.24.0,2.24.1,2.25.2,2.25.3,2.25.4,2.25.90,2.25.91,2.25.92,2.26.0,2.26.0.1,2.26.1,2.26.2,2.27.1,2.27.1.1,2.27.2,2.27.3,2.27.4,2.27.5,2.27.91,2.27.91.1,2.27.92,2.28.0,2.28.0.1,2.28.1,2.28.1.1,2.28.1.2,2.28.2,2.29.1,2.29.2,2.29.3,2.29.4,2.29.5,2.29.5.1,2.29.6,2.29.90,2.29.91,2.29.91.1,2.29.91.2,2.29.92,2.29.93,2.30.0,2.30.0.1,2.30.0.2,2.30.1,2.30.1.1,2.30.2,2.30.3,2.31.1,2.31.2,2.31.3,2.31.4,2.31.5,2.31.5.1,2.31.6,2.31.90,2.31.91,2.31.92,2.32.0,2.32.0.1,2.32.1,2.32.2,2.33.1,2.33.2,2.33.3,2.33.4,2.34.0,2.91.0,2.91.1,2.91.2,2.91.3,2.91.3.1,2.91.4,2.91.4.1,2.91.4.2,2.91.4.3,2.91.5,2.91.5.1,2.91.6,2.91.6.1,2.91.90,2.91.90.1,2.91.90.2,2.91.91,2.91.91.1,2.91.92,2.91.93,3.0.0,3.0.1,3.0.2,3.1.1,3.1.2,3.1.2.1,3.1.3,3.1.4,3.1.5,3.1.5.1,3.1.90,3.1.90.1,3.1.91,3.1.92,3.2.0.1,and avoid the version (,3.2.1],0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.8,0.9,0.11,0.12,0.13,0.14,0.21.1,0.21.2,0.21.3,0.21.4,0.21.5,0.21.5.1,0.21.5.2,0.21.90,0.21.91,0.22.0,0.22.1,0.23.1,0.23.2,0.23.3,0.23.4,2.23.6,2.23.90,2.23.91,2.23.92,2.24.0,2.24.1,2.25.2,2.25.3,2.25.4,2.25.90,2.25.91,2.25.92,2.26.0,2.26.0.1,2.26.1,2.26.2,2.27.1,2.27.1.1,2.27.2,2.27.3,2.27.4,2.27.5,2.27.91,2.27.91.1,2.27.92,2.28.0,2.28.0.1,2.28.1,2.28.1.1,2.28.1.2,2.28.2,2.29.1,2.29.2,2.29.3,2.29.4,2.29.5,2.29.5.1,2.29.6,2.29.90,2.29.91,2.29.91.1,2.29.91.2,2.29.92,2.29.93,2.30.0,2.30.0.1,2.30.0.2,2.30.1,2.30.1.1,2.30.2,2.30.3,2.31.1,2.31.2,2.31.3,2.31.4,2.31.5,2.31.5.1,2.31.6,2.31.90,2.31.91,2.31.92,2.32.0,2.32.0.1,2.32.1,2.32.2,2.33.1,2.33.2,2.33.3,2.33.4,2.34.0,2.91.0,2.91.1,2.91.2,2.91.3,2.91.3.1,2.91.4,2.91.4.1,2.91.4.2,2.91.4.3,2.91.5,2.91.5.1,2.91.6,2.91.6.1,2.91.90,2.91.90.1,2.91.90.2,2.91.91,2.91.91.1,2.91.92,2.91.93,3.0.0,3.0.1,3.0.2,3.1.1,3.1.2,3.1.2.1,3.1.3,3.1.4,3.1.5,3.1.5.1,3.1.90,3.1.90.1,3.1.91,3.1.92,3.2.0.1