Lucene search

[email protected]CVE-2007-2418

HistoryMay 02, 2007 - 10:19 p.m.

CVE-2007-2418

2007-05-0222:19:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2007-2418

buffer overflow

rendezvous

xmpp

cerulean studios

trillian pro

security vulnerability

nvd

8.2 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.112 Low

EPSS

Percentile

95.1%

JSON

Heap-based buffer overflow in the Rendezvous / Extensible Messaging and Presence Protocol (XMPP) component (plugins\rendezvous.dll) for Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to execute arbitrary code via a message that triggers the overflow from expansion that occurs during encoding.

CPENameOperatorVersion
cerulean_studios:trillian_procerulean studios trillian prole3.1_build_121
cerulean_studios:trillian_procerulean studios trillian prole3.1.5.0

CPE	Name	Operator	Version
cerulean_studios:trillian_pro	cerulean studios trillian pro	le	3.1_build_121
cerulean_studios:trillian_pro	cerulean studios trillian pro	le	3.1.5.0

References

blog.ceruleanstudios.com/?p=131

dvlabs.tippingpoint.com/advisory/TPTI-07-06

osvdb.org/35720

www.securityfocus.com/archive/1/467439/100/0/threaded

www.securityfocus.com/bid/23781

exchange.xforce.ibmcloud.com/vulnerabilities/34059

8.2 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.112 Low

EPSS

Percentile

95.1%

JSON

Related for CVE-2007-2418

prion1 nessus1 securityvulns2