Lucene search
HistoryAug 16, 2005 - 4:00 a.m.
CVE-2004-2304
cve-2004-2304
trillian
integer overflow
denial of service
remote code execution
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
High
0.096 Low
EPSS
Percentile
94.8%
Integer overflow in Trillian 0.74 and earlier, and Trillian Pro 2.01 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.
Affected configurations
Node
cerulean_studiostrillianMatch0.71
ORcerulean_studiostrillianMatch0.73
ORcerulean_studiostrillianMatch0.74
ORcerulean_studiostrillianMatch0.725
ORcerulean_studiostrillian_proMatch1.0
ORcerulean_studiostrillian_proMatch2.0
ORcerulean_studiostrillian_proMatch2.01
Related
cvelist
cvelist
CVE-2004-2304
2005-08-16 04:00:00
nvd
nvd
CVE-2004-2304
2004-12-31 05:00:00
nessus
nessus
Trillian DirectIM Packet Remote Overflow
2004-02-25 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
High
0.096 Low
EPSS
Percentile
94.8%
Related for CVE-2004-2304