CVE:CVE-2011-1000
CNNVD:CNNVD-201102-270
Telepathy Gabble 0.11.7之前的0.11版本，0.10.5之前的0.10版本，以及0.8.15之前的0.8版本中的jingle-factory.c文件中存在输入验证漏洞。远程攻击者可以借助特制google:jingleinfo节（为流媒体指定可选服务器）嗅探音频及视频调用。
solution:Upgrade freedesktop telepathy_gabble to a higher version than 0.11,0.11.1,0.11.2,0.11.3,0.11.4,0.11.5,0.11.6,0.10,0.10.1,0.10.2,0.10.3,0.10.4,0.8,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.8.6,0.8.7,0.8.8,0.8.9,0.8.10,0.8.11,0.8.12,0.8.13,0.8.14,and avoid the version 0.11,0.11.1,0.11.2,0.11.3,0.11.4,0.11.5,0.11.6,0.10,0.10.1,0.10.2,0.10.3,0.10.4,0.8,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.8.6,0.8.7,0.8.8,0.8.9,0.8.10,0.8.11,0.8.12,0.8.13,0.8.14