Lucene search
MitreCVE-2007-3832HistoryJul 17, 2007 - 10:30 p.m.
CVE-2007-3832
2007-07-1722:30:00
CWE-119
mitre
web.nvd.nist.gov
22
cve-2007-3832
buffer overflow
aol instant messenger
aim protocol
cerulean studios
trillian
remote code execution
uri
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
High
EPSS
0.126
Percentile
95.5%
Buffer overflow in the AOL Instant Messenger (AIM) protocol handler in AIM.DLL in Cerulean Studios Trillian allows remote attackers to execute arbitrary code via a malformed aim: URI, as demonstrated by a long URI beginning with the aim:///#1111111/ substring.
Affected configurations
Node
cerulean_studiostrillianMatch3.1.6.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cerulean_studios | trillian | 3.1.6.0 | cpe:2.3:a:cerulean_studios:trillian:3.1.6.0:*:*:*:*:*:*:* |
References
Related
prion
prion
Buffer overflow
2007-07-17 22:30:00
nvd
nvd
CVE-2007-3832
2007-07-17 22:30:00
exploitdb
exploitdb
Trillian 3.1.6.0 - URI Handler Remote Code Execution
2007-07-16 00:00:00
cert
cert
Trillian Instant Messenger client fails to properly handle malformed URIs
2007-07-16 00:00:00
cvelist
cvelist
CVE-2007-3832
2007-07-17 22:00:00
nessus
nessus
Trillian aim:// URI Handler Vulnerabilities
2007-07-23 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
High
EPSS
0.126
Percentile
95.5%
Related for CVE-2007-3832