TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption

TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption http://dvlabs.tippingpoint.com/advisory/TPTI-07-06 May 2, 2007 -- CVE ID: CVE-2007-2418 -- Affected Vendor: Cerulean Studios -- Affected Products: Trillian Pro 3.1 build 121 and below -- TippingPointTM IPS Customer Protection:...

CVE-2007-2418

CVE-2007-2418 affects Cerulean Studios Trillian Pro prior to 3.1.5.1, in the Rendezvous/XMPP plugin. A heap-based overflow during encoding of an XMPP message in plugins\rendezvous.dll allows remote code execution. Exploitation is remote and no user interaction is required. Cerulean released an up...