EUVD-2003-0514

Malware in sbrugna...

EUVD-2002-1468

Malware in sbrugna...

EUVD-2002-1471

Malware in sbrugna...

CVE-2002-2155

Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string specifiers in the name...

CVE-2002-2156

Buffer overflow in Trillian 0.73 allows remote IRC servers to execute arbitrary code via a long PING response...

The vulnerability of Trillian software allows a malicious attacker to compromise the confidentiality and integrity of protected information.

The vulnerability exists in Cerulean Studios Trillian due to the lack of verification of SSL certificates during MSN authentication. Exploiting this vulnerability allows malicious actors operating remotely to obtain MSN credentials by using a “man-in-the-middle” attack and replacing the SSL...

EUVD-2002-2368

Buffer overflow in the IDENT daemon identd in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long request...

CVE-2004-2370

Stack-based buffer overflow in Trillian 0.71 through 0.74f and Trillian Pro 1.0 through 2.01 allows remote attackers to execute arbitrary code via a Yahoo Messenger packet with a long key name...

CVE-2002-1486

Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service and possibly execute arbitrary code via 1 a large response from the server, 2 a JOIN with a long channel name, 3 a long "raw 221" message, 4 a PRIVMSG with a...

CVE-2002-1488

The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service crash via a PART message with 1 a missing channel or 2 a channel that the Trillian user is not in...

CVE-2002-1487

The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service crash by sending the raw messages 1 206, 2 211, 3 213, 4 214, 5 215, 6 217, 7 218, 8 243, 9 302, 10 317, 11 324, 12 332, 13 333, 14 352, and 15 367...

Trillian 0.74 - IRC Raw Messages Denial of Service

Trillian 0.74 - IRC Raw Messages Denial of Service // source: https://www.securityfocus.com/bid/5775/info A vulnerability has been reported for Trillian. Reportedly, Trillian is prone to a denial of service condition when certain IRC raw messages are received by the client. This may be exploited ...

Trillian 0.74 - IRC Oversized Data Block Buffer Overflow

// source: https://www.securityfocus.com/bid/5777/info A vulnerability has been reported for Trillian. Reportedly, Trillian is prone to a buffer overflow condition when it receives blocks of data that are larger than 4095 bytes. A malicious server may exploit this condition to cause a denial of...

Trillian 0.74 - IRC Raw Messages Denial of Service

// source: https://www.securityfocus.com/bid/5775/info A vulnerability has been reported for Trillian. Reportedly, Trillian is prone to a denial of service condition when certain IRC raw messages are received by the client. This may be exploited by a malicious server. / Trillian-Dos.c Author: Lan...

Trillian 0.7250.730.74 - IRC User Mode Numeric Remote Buffer Overflow

Trillian 0.7250.730.74 - IRC User Mode Numeric Remote Buffer Overflow // source: https://www.securityfocus.com/bid/5769/info Trillian is an instant messaging client that supports a number of protocols including IRC, ICQ, MSN. It is available for Microsoft Windows systems. It has been reported tha...

Yet Another. Trillian 'JOIN' Overflow.

Discovered: ----------- 02 September 2002 By Me, Lance Fitz-Herbert aka phrizer. Vulnerable Applications: ------------------------ Tested On Trillian .73 and .74, But im guessing older versions are also vulnerable, and possibly version 1.0 Pro. Impact: ------- Low-High. This could possibly allow...

trillian DoS: trillian 1.0 pro also vulnerable

followup to Lance Fitz-Herbert aka phrizer's find earlier today. trillian pro 1.0 is also vulnerable to the DoS. no need to run C code, perl and netcat do it: perl -e 'print "A"x450; print "n"' | nc ip 113 same precautions ... disable or filter identd on that host. enjoy. jose nazario, ph.d...

Trillian 0.730.74 - IRC PRIVMSG Buffer Overflow

Trillian 0.730.74 - IRC PRIVMSG Buffer Overflow // source: https://www.securityfocus.com/bid/5755/info Trillian is an instant messaging client that supports a number of protocols including IRC, ICQ, MSN. It is available for Microsoft Windows systems. A buffer overflow has been discovered in...

Trillian .73 & .74 "PRIVMSG" Overflow.

Discovered: ----------- 02 September 2002 By Me, Lance Fitz-Herbert aka phrizer. Vulnerable Applications: ------------------------ Tested On Trillian .74 and .74, But im guessing older versions are also vulnerable. Impact: ------- Low-High. This could possibly allow arbitary code to be executed o...