CVE:CVE-2012-2085
CNNVD:CNNVD-201204-103
Gajim 0.15之前版本中存在漏洞，该漏洞源于common/logger.py中的“get_last_conversation_lines()”函数内的一个输入过滤错误。攻击者可利用该漏洞借助特制jid（Jabber ID）注入任意SQL查询。
solution:Upgrade gajim gajim to a higher version than 0.14.4,0.1,0.10,0.10.1,0.11,0.11.1,0.11.2,0.11.3,0.11.4,0.12,0.12.1,0.12.2,0.12.3,0.12.4,0.12.5,0.12.5:alpha1,0.12.5:beta1,0.13,0.13.1,0.13.2,0.13.3,0.13.4,0.14,0.14.1,0.14.2,0.14.3,and avoid the version (,0.14.4],0.1,0.10,0.10.1,0.11,0.11.1,0.11.2,0.11.3,0.11.4,0.12,0.12.1,0.12.2,0.12.3,0.12.4,0.12.5,0.12.5:alpha1,0.12.5:beta1,0.13,0.13.1,0.13.2,0.13.3,0.13.4,0.14,0.14.1,0.14.2,0.14.3