cerulean studios trillian vulnerabilities and exploits

(subscribe to this query)

Cerulean Studios Trillian Pro prior to 3.1.5.1 allows remote malicious users to obtain potentially sensitive information via long CTCP PING messages that contain UTF-8 characters, which generates a malformed response that is not truncated by a newline, which can cause portions of...

Cerulean Studios Trillian 3.1

Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle malicious users to spoof SSL servers via an arbitrary valid certificate, a diff...

Cerulean Studios Trillian 5.1.0.19

Cerulean Studios Trillian 3.1 Basic does not check SSL certificates during MSN authentication, which allows remote malicious users to obtain MSN credentials via a man-in-the-middle attack with a spoofed SSL certificate.

Cerulean Studios Trillian 3.1

Stack-based buffer overflow in the image tooltip implementation in Trillian prior to 3.1.12.0 allows remote malicious users to execute arbitrary code via a long image filename, related to "AIM IMG Tag Parsing."

Double free vulnerability in the XML parser in Trillian prior to 3.1.12.0 allows remote malicious users to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."

Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian prior to 3.1.12.0 allows remote malicious users to execute arbitrary code via a malformed XML tag.

Heap-based buffer overflow in the XML parsing functionality in talk.dll in Cerulean Studios Trillian Pro prior to 3.1.10.0 allows remote malicious users to execute arbitrary code via a malformed attribute in an IMG tag.

Ceruleanstudios Trillian Pro

Stack-based buffer overflow in Cerulean Studios Trillian prior to 3.1.10.0 allows remote malicious users to execute arbitrary code via unspecified attributes in the X-MMS-IM-FORMAT header in an MSN message.

Cerulean Studios Trillian 3.1.9.0 Cerulean Studios Trillian 0.71 Cerulean Studios Trillian 2.0 Cerulean Studios Trillian 3.1.7.0 Cerulean Studios Trillian 3.1.5.0 Cerulean Studios Trillian 0.6351 Cerulean Studios Trillian 3.1.5.1 Cerulean Studios Trillian 0.73 Cerulean Studios Trillian 0.725 Cerulean Studios Trillian 3.1 Cerulean Studios Trillian 3.0 Cerulean Studios Trillian 0.74i Cerulean Studios Trillian 3.1.6.0 Cerulean Studios Trillian 0.74 Cerulean Studios Trillian 2.1

Stack-based buffer overflow in AIM.DLL in Cerulean Studios Trillian prior to 3.1.10.0 allows user-assisted remote malicious users to execute arbitrary code via a long attribute value in a FONT tag in a message.

Ceruleanstudios Trillian

Buffer overflow in the Display Names message feature in Cerulean Studios Trillian Basic and Pro 3.1.9.0 allows remote malicious users to cause a denial of service (crash) or execute arbitrary code via a long nickname in an MSN protocol message.

Cerulean Studios Trillian 3.1.9.0

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook