cerulean studios trillian 0.725 vulnerabilities and exploits

(subscribe to this query)

Cerulean Studios Trillian 0.73 and previous versions use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts.

Cerulean Studios Trillian 0.6351 Cerulean Studios Trillian 0.725 Cerulean Studios Trillian 0.73

1 EDB exploit

Buffer overflow in the XML parser of Trillian 0.6351, 0.725 and 0.73 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a skin with a long colors file name in trillian.xml.

Cerulean Studios Trillian 0.73 Cerulean Studios Trillian 0.6351 Cerulean Studios Trillian 0.725

Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service and possibly execute arbitrary code via (1) a large response from the server, (2) a JOIN with a long channel name, (3) a long "raw 221&qu...

Cerulean Studios Trillian 0.725 Cerulean Studios Trillian 0.73 Cerulean Studios Trillian 0.74

5 EDB exploits

Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string specifiers in the name.

Cerulean Studios Trillian 0.725 Cerulean Studios Trillian 0.73

Buffer overflow in the IRC module of Trillian 0.725 and 0.73 allowing remote malicious users to execute arbitrary code via a long DCC Chat message.

Cerulean Studios Trillian 0.725 Cerulean Studios Trillian 0.73

Integer overflow in Trillian 0.74 and previous versions, and Trillian Pro 2.01 and previous versions, allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.

Cerulean Studios Trillian 0.74 Cerulean Studios Trillian Pro 1.0 Cerulean Studios Trillian 0.71 Cerulean Studios Trillian Pro 2.0 Cerulean Studios Trillian Pro 2.01 Cerulean Studios Trillian 0.725 Cerulean Studios Trillian 0.73

Stack-based buffer overflow in Trillian 0.71 up to and including 0.74f and Trillian Pro 1.0 up to and including 2.01 allows remote malicious users to execute arbitrary code via a Yahoo Messenger packet with a long key name.

Cerulean Studios Trillian 0.74c Cerulean Studios Trillian 0.74d Cerulean Studios Trillian 0.74 Cerulean Studios Trillian 0.74b Cerulean Studios Trillian Pro 2.0 Cerulean Studios Trillian Pro 2.01 Cerulean Studios Trillian 0.71 Cerulean Studios Trillian 0.725 Cerulean Studios Trillian 0.73 Cerulean Studios Trillian 0.74g Cerulean Studios Trillian Pro 1.0 Cerulean Studios Trillian 0.74e Cerulean Studios Trillian 0.74f

Stack-based buffer overflow in Cerulean Studios Trillian prior to 3.1.10.0 allows remote malicious users to execute arbitrary code via unspecified attributes in the X-MMS-IM-FORMAT header in an MSN message.

Cerulean Studios Trillian 0.6351 Cerulean Studios Trillian 0.71 Cerulean Studios Trillian 3.0 Cerulean Studios Trillian 3.1 Cerulean Studios Trillian 0.74 Cerulean Studios Trillian 0.74i Cerulean Studios Trillian 3.1.6.0 Cerulean Studios Trillian 3.1.7.0 Cerulean Studios Trillian 3.1.9.0 Cerulean Studios Trillian 0.725 Cerulean Studios Trillian 0.73 Cerulean Studios Trillian 3.1.5.0 Cerulean Studios Trillian 3.1.5.1 Cerulean Studios Trillian 2.0 Cerulean Studios Trillian 2.1

Double free vulnerability in the XML parser in Trillian prior to 3.1.12.0 allows remote malicious users to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."

Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian prior to 3.1.12.0 allows remote malicious users to execute arbitrary code via a malformed XML tag.

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook