351 matches found
Authentication flaw
Cerulean Studios Trillian 3.1 Basic does not check SSL certificates during MSN authentication, which allows remote attackers to obtain MSN credentials via a man-in-the-middle attack with a spoofed SSL certificate...
CVE-2009-4831
Cerulean Studios Trillian 3.1 Basic does not check SSL certificates during MSN authentication, which allows remote attackers to obtain MSN credentials via a man-in-the-middle attack with a spoofed SSL certificate...
CVE-2009-4831
Cerulean Studios Trillian 3.1 Basic does not verify SSL certificates during MSN authentication, enabling remote attackers to obtain MSN credentials via a man-in-the-middle with a spoofed certificate. CVE-2009-4831. The entry notes a MEDIUM base score (5.8) with network attack vector, no authentic...
Trillian
Buffer overflow in the XML parser in Trillian 3.1.9.0, and possibly earlier, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted DTD file...
Cerulean Studios Trillian Image Filename XML Tag Stack Buffer Overflow (CVE-2008-5401)
Cerulean Studios' Trillian is an instant messaging IM client application that can interact with various IM protocols such as MSN, AIM, ICQ, YAHOO, etc. There exists a stack buffer overflow vulnerability in Trillian instant messenger client application. The vulnerability is due to a boundary error...
Cerulean Studios Trillian AIM XML Tag Handling Heap Buffer Overflow (CVE-2008-5403)
Cerulean Studios' Trillian is an instant messaging IM client application that can interact with various IM protocols such as MSN, AIM, ICQ, YAHOO, etc. Specifically, AIM clients uses Open System for Communication in Realtime OSCAR protocol to talk to the backend servers. In Trillian, communicatio...
Trillian MSN验证SSL证书校验安全绕过漏洞
Bugraq ID: 35509 Trillian是一款聊天程序，和多种即时通讯程序使用相同的接口，包括AIM、ICQ、Yahoo! Messenger、MSN Messenger和IRC。 Trillian在发送MSN用户凭据前没有正确检查SSL证书，攻击者可以通过伪造的证书，在没有任何警告的境况下获得MSN用户名和密码信息。 Cerulean Studios Trillian 3.1 目前没有详细解决方案提供： http://www.ceruleanstudios.com/...
Trillian SSL Certificate Vulnerability
Trillian SSL Certificate Vulnerability I. The Vulnerability Trillian does not check SSL certificate before sending MSN user credentials. An attacker is able to obtain MSN username and password with a spoofed certificate and no alert is generated to the user. This vulnerability was found in Trilli...
Trillian Buffer Overflow Vulnerability
This host is installed with Trillian and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbtrillianbofvuln.nasl 4892 2016-12-30 15:39:07Z teissa $ Trillian Buffer Overflow Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Trillian Buffer Overflow Vulnerability
Trillian is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Trillian Version Detection
Detects the installed version of Trillian on Windows. The script logs in via smb, searches for Trillian in the registry and gets the version from the file. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
CVE-2008-6563
Buffer overflow in the XML parser in Trillian 3.1.9.0, and possibly earlier, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted DTD file...
Buffer overflow
Buffer overflow in the XML parser in Trillian 3.1.9.0, and possibly earlier, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted DTD file...
CVE-2008-6563
Buffer overflow in the XML parser in Trillian 3.1.9.0, and possibly earlier, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted DTD file...
CVE-2008-6563
CVE-2008-6563 describes a buffer overflow in the XML parser of Trillian, affected as of version 3.1.9.0 (and possibly earlier). A crafted DTD file can be used by a remote attacker to cause a crash and potentially execute arbitrary code. Public references consistently name Trillian Buffer Overflow...
Trillian Messenger Multiple Vulnerabilities
Trillian Messenger is prone to multiple remote memory corruption vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Trillian Messenger Multiple Vulnerabilities
This host is installed with Trillian Messenger and is prone to multiple remote memory corruption vulnerabilities. OpenVAS Vulnerability Test $Id: gbtrillianmultvuln.nasl 5370 2017-02-20 15:24:26Z cfi $ Trillian Messenger Multiple Vulnerabilities Authors: Sujit Ghosal Copyright: Copyright c 2008...
CVE-2008-5403
Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XML tag...
CVE-2008-5401
Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image filename, related to "AIM IMG Tag Parsing."...