The vendor BigAntSoft has released an update to fix this vulnerability. The latest version of BigAnt IM server and client is v2.35,it can be downloaded from the link below. http://www.bigantsoft.com/download/bigant.zip Regards, /str0ke