cerulean studios trillian 0.6351 vulnerabilities and exploits

(subscribe to this query)

Stack-based buffer overflow in the image tooltip implementation in Trillian prior to 3.1.12.0 allows remote malicious users to execute arbitrary code via a long image filename, related to "AIM IMG Tag Parsing."

Double free vulnerability in the XML parser in Trillian prior to 3.1.12.0 allows remote malicious users to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."

Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian prior to 3.1.12.0 allows remote malicious users to execute arbitrary code via a malformed XML tag.

Buffer overflow in the IDENT daemon (identd) in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a long request.

Cerulean Studios Trillian 0.73 Cerulean Studios Trillian 0.74 Cerulean Studios Trillian Pro 1.0

Stack-based buffer overflow in Cerulean Studios Trillian prior to 3.1.10.0 allows remote malicious users to execute arbitrary code via unspecified attributes in the X-MMS-IM-FORMAT header in an MSN message.

Cerulean Studios Trillian 0.6351 Cerulean Studios Trillian 0.71 Cerulean Studios Trillian 3.0 Cerulean Studios Trillian 3.1 Cerulean Studios Trillian 0.74 Cerulean Studios Trillian 0.74i Cerulean Studios Trillian 3.1.6.0 Cerulean Studios Trillian 3.1.7.0 Cerulean Studios Trillian 3.1.9.0 Cerulean Studios Trillian 0.725 Cerulean Studios Trillian 0.73 Cerulean Studios Trillian 3.1.5.0 Cerulean Studios Trillian 3.1.5.1 Cerulean Studios Trillian 2.0 Cerulean Studios Trillian 2.1

Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service and possibly execute arbitrary code via (1) a large response from the server, (2) a JOIN with a long channel name, (3) a long "raw 221&qu...

Cerulean Studios Trillian 0.725 Cerulean Studios Trillian 0.73 Cerulean Studios Trillian 0.74

5 EDB exploits

Buffer overflow in the XML parser of Trillian 0.6351, 0.725 and 0.73 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a skin with a long colors file name in trillian.xml.

Cerulean Studios Trillian 0.73 Cerulean Studios Trillian 0.6351 Cerulean Studios Trillian 0.725

AOL Instant Messenger (AIM) 4.7.2480 and previous versions allows remote malicious users to cause a denial of service (application crash) via an instant message that contains a large amount of "<!--" HTML comments.

Aol Instant Messenger 4.0 Aol Instant Messenger 4.6 Aol Instant Messenger 4.7 Aol Instant Messenger 4.3 Aol Instant Messenger 4.3.2229 Aol Instant Messenger 4.1 Aol Instant Messenger 4.2 Aol Instant Messenger 4.7.2480 Cerulean Studios Trillian 0.6351 Aol Instant Messenger 4.4 Aol Instant Messenger 4.5

Cerulean Studios Trillian 0.73 and previous versions use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts.

Cerulean Studios Trillian 0.6351 Cerulean Studios Trillian 0.725 Cerulean Studios Trillian 0.73

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook