CVE-2008-5402

Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."...

Heap overflow

Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XML tag...

Double free

Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."...

Stack overflow

Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image filename, related to "AIM IMG Tag Parsing."...

KLA10372 ACE vulnerabilities in Trillian

Multiple critical vulnerabilities have been found in Trillian. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities 1. A buffer overflow and double free can be exploited remotely via a specially designed XML; 2. Buffer overflow c...

CVE-2008-5403

Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XML tag...

CVE-2008-5402

Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."...

CVE-2008-5401

CVE-2008-5401 affects Trillian Messenger. A stack-based buffer overflow in the image tooltip parsing (AIM IMG Tag Parsing) allows remote code execution via a long image filename and impacts Trillian versions up to 3.1.11.0; vulnerable until 3.1.11.0, with 3.1.12.0 addressing the issue. Remediatio...

CVE-2008-5403

CVE-2008-5403 : Heap-based buffer overflow in the XML parser of Trillian’s AIM plugin (aim.dll) allows remote attackers to execute arbitrary code when parsing malformed XML tags. Affected product: Cerulean Studios Trillian (AIM plugin). Vulnerability arises from a boundary/allocation error in XML...

CVE-2008-5402

Trillian has a CVE-2008-5402 vulnerability: a double-free in the XML parser before version 3.1.12.0 can enable remote code execution via crafted XML (notably the IMG SRC ID payload). Public sources (ZDI-08-078, OpenVAS entries, and NVD record) corroborate a remote memory corruption/ARiC condition...

CVE-2008-5401

Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image filename, related to "AIM IMG Tag Parsing."...

Trillian multiple security vulnerabilities

Multiple AIM plugin vulnerabilities, HTML parsing vulnerabilities for multiple protocols...

ZDI-08-077: Trillian AIM IMG Tag Parsing Stack Overflow Vulnerability

ZDI-08-077: Trillian AIM IMG Tag Parsing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-077 December 4, 2008 -- Affected Vendors: Cerulean Studios -- Affected Products: Cerulean Studios Trillian -- Vulnerability Details: This vulnerability allows remote attackers ...

ZDI-08-078: Trillian IMG SRC ID Memory Corruption Vulnerability

ZDI-08-078: Trillian IMG SRC ID Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-078 December 4, 2008 -- Affected Vendors: Cerulean Studios -- Affected Products: Cerulean Studios Trillian -- Vulnerability Details: This vulnerability allows remote attackers to...

Trillian多个远程内存破坏漏洞

BUGTRAQ ID: 32645 Trillian是一个聊天程序，和多种即时通讯程序使用相同的接口，包括AIM、ICQ、Yahoo! Messenger、MSN Messenger和IRC。 Trillian的XML处理代码在处理畸形的XML标签时没有分配充足的空间，将其拷贝到新分配的缓冲区时可能会用攻击者提供的数据覆盖堆结构；此外XML处理代码在处理特殊格式的xml时可能会破坏内部数据结构，之后在释放这个数据结构时应用程序会多次释放单个块，这可能导致执行任意指令。...

ZDI-08-079: Trillian AIM Plugin Malformed XML Tag Heap Overflow Vulnerability

ZDI-08-079: Trillian AIM Plugin Malformed XML Tag Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-079 December 4, 2008 -- Affected Vendors: Cerulean Studios -- Affected Products: Cerulean Studios Trillian -- Vulnerability Details: This vulnerability allows remote...

Trillian < 3.1.12.0 Multiple Vulnerabilities

Binary data 4778.prm...

Trillian < 3.1.12.0 Multiple Vulnerabilities

The version of Trillian installed on the remote host reportedly contains several vulnerabilities : - A stack-based buffer overflow in the tool tip processing code could allow an unauthenticated attacker to execute arbitrary code with client privileges on the remote system. ZDI-08-077 - A...

Trillian AIM Plugin Malformed XML Tag Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cerulean Studios Trillian. Authentication is not required to exploit this vulnerability. The specific flaw exists within the XML processing code for Trillian. When parsing a malformed XML tag, the...

Trillian IMG SRC ID Memory Corruption Vulnerability

This vulnerability allows remote attackers to potentially execute arbitrary code on vulnerable installations of Cerulean Studios Trillian. Authentication is not required to exploit this vulnerability. The specific flaw exists within the XML processing code for Trillian. When parsing specially...