Debian Security Advisory DSA 541-1 – In icecast-server, the UserAgent variable is not properly html_escaped allowing an an attacker the ability to cause the client to execute arbitrary Java script commands.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34133/dsa-541.txt
Source: https://packetstormsecurity.com/files/34133/dsa-541.txt.html