Cerulean Studios Trillian Instant Messenger fails to properly handle "UTF-8" sequences

Overview A vulnerability in Cerulean Studios Trillian Instant Messenger client may lead to execution of arbitrary code. Description Cerulean Studios Trillian Instant Messenger client fails to properly handle specially crafted UTF-8 text. A heap overflow may occur when Trillian receives a messages...

iDefense Security Advisory 06.18.07: Cerulean Studios Trillian UTF-8 Word Wrap Heap Overflow Vulnerability

Cerulean Studios Trillian UTF-8 Word Wrap Heap Overflow Vulnerability iDefense Security Advisory 06.18.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 18, 2007 I. BACKGROUND Trillian is a multi-protocol chat application that supports IRC, ICQ, AIM and MSN protocols. More information...

TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption

TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption http://dvlabs.tippingpoint.com/advisory/TPTI-07-06 May 2, 2007 -- CVE ID: CVE-2007-2418 -- Affected Vendor: Cerulean Studios -- Affected Products: Trillian Pro 3.1 build 121 and below -- TippingPointTM IPS Customer Protection:...

Heap overflow

Multiple heap-based buffer overflows in the IRC component in Cerulean Studios Trillian Pro before 3.1.5.1 allow remote attackers to corrupt memory and possibly execute arbitrary code via 1 a URL with a long UTF-8 string, which triggers the overflow when the user highlights it, or 2 a font HTML ta...

Design/Logic Flaw

Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to obtain potentially sensitive information via long CTCP PING messages that contain UTF-8 characters, which generates a malformed response that is not truncated by a newline, which can cause portions of a server message to be...

CVE-2007-2479

Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to obtain potentially sensitive information via long CTCP PING messages that contain UTF-8 characters, which generates a malformed response that is not truncated by a newline, which can cause portions of a server message to be...

CVE-2007-2478

CVE-2007-2478 affects Cerulean Studios Trillian Pro’s IRC component prior to 3.1.5.1. It describes two heap-based buffer overflows triggered by long UTF-8 data: (1) a URL with a long UTF-8 string highlighted by the user, and (2) a font HTML tag with a face attribute containing a long UTF-8 string...

CVE-2007-2479

CVE-2007-2479 affects Cerulean Studios Trillian Pro before 3.1.5.1. The vulnerability arises from processing long CTCP PING messages containing UTF-8 characters, producing a malformed response that is not truncated by a newline, which can cause portions of a server message to be sent to an attack...

CVE-2007-2479

Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to obtain potentially sensitive information via long CTCP PING messages that contain UTF-8 characters, which generates a malformed response that is not truncated by a newline, which can cause portions of a server message to be...

CVE-2007-2418

CVE-2007-2418 affects Cerulean Studios Trillian Pro prior to 3.1.5.1, in the Rendezvous/XMPP plugin. A heap-based overflow during encoding of an XMPP message in plugins\rendezvous.dll allows remote code execution. Exploitation is remote and no user interaction is required. Cerulean released an up...

cerulean-rfi.txt

----------------------------------------------- Cerulean Portal System phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz - xoron.info ----------------------------------------------- Code: include $phpbbrootpath . 'portal/config.'...

CVE-2007-0684

PHP remote file inclusion vulnerability in portal.php in Cerulean Portal System 0.7b allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in portal.php in Cerulean Portal System 0.7b allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2007-0684

The CVE-2007-0684 entry describes a PHP remote file inclusion vulnerability in portal.php of Cerulean Portal System 0.7b. It allows an attacker to execute arbitrary PHP code by supplying a URL in the phpbb_root_path parameter. The affected component is Cerulean Portal System 0.7b, with portal.php...

CVE-2007-0684

PHP remote file inclusion vulnerability in portal.php in Cerulean Portal System 0.7b allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

Cerulean Portal System 0.7b Remote File Include Vulnerability

No description provided by source. ----------------------------------------------- Cerulean Portal System phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz - xoron.info ----------------------------------------------- Code: include...

Cerulean Portal System (phpbb_root_path) Remote File Include Exploit

----------------------------------------------- Cerulean Portal System phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz - xoron.info ----------------------------------------------- Code: include $phpbbrootpath . 'portal/config.'...

Cerulean Portal System 0.7b - Remote File Inclusion

----------------------------------------------- Cerulean Portal System phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz - xoron.info ----------------------------------------------- Code: include $phpbbrootpath . 'portal/config.'...

Cerulean Portal System 0.7b - Remote File Inclusion

Cerulean Portal System 0.7b - Remote File Inclusion ----------------------------------------------- Cerulean Portal System phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz - xoron.info -----------------------------------------------...

Cerulean Portal System 0.7b Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================= Cerulean Portal System 0.7b Remote File Include Vulnerability ============================================================= -----------------------------------------------...