Stack overflow

Stack-based buffer overflow in AIM.DLL in Cerulean Studios Trillian before 3.1.10.0 allows user-assisted remote attackers to execute arbitrary code via a long attribute value in a FONT tag in a message...

Stack overflow

Stack-based buffer overflow in Cerulean Studios Trillian before 3.1.10.0 allows remote attackers to execute arbitrary code via unspecified attributes in the X-MMS-IM-FORMAT header in an MSN message...

CVE-2008-2408

Heap-based buffer overflow in the XML parsing functionality in talk.dll in Cerulean Studios Trillian Pro before 3.1.10.0 allows remote attackers to execute arbitrary code via a malformed attribute in an IMG tag...

CVE-2008-2409

Stack-based buffer overflow in Cerulean Studios Trillian before 3.1.10.0 allows remote attackers to execute arbitrary code via unspecified attributes in the X-MMS-IM-FORMAT header in an MSN message...

CVE-2008-2407

Stack-based buffer overflow in AIM.DLL in Cerulean Studios Trillian before 3.1.10.0 allows user-assisted remote attackers to execute arbitrary code via a long attribute value in a FONT tag in a message...

Heap overflow

Heap-based buffer overflow in the XML parsing functionality in talk.dll in Cerulean Studios Trillian Pro before 3.1.10.0 allows remote attackers to execute arbitrary code via a malformed attribute in an IMG tag...

CVE-2008-2408

Heap-based buffer overflow in the XML parsing functionality in talk.dll in Cerulean Studios Trillian Pro before 3.1.10.0 allows remote attackers to execute arbitrary code via a malformed attribute in an IMG tag...

CVE-2008-2407

CVE-2008-2407 affects Cerulean Studios Trillian prior to 3.1.10.0, specifically a stack-based buffer overflow in AIM.DLL triggered by parsing a long attribute value in a FONT tag within a message. The underlying issue is a buffer overrun via sprintf() during message processing, allowing arbitrary...

CVE-2008-2408

CVE-2008-2408 concerns Cerulean Studios Trillian Pro before 3.1.10.0, where the XML parsing in talk.dll is vulnerable. The issue is a heap-based buffer overflow triggered by a malformed attribute in an IMG tag, allowing remote attackers to execute arbitrary code. The vulnerability is exploitable ...

CVE-2008-2409

CVE-2008-2409 concerns Cerulean Studios Trillian prior to 3.1.10.0. Multiple sources (NVD, ZDI, CVE lists, Nessus plugin) describe a stack-based buffer overflow in the MSN protocol header parsing, specifically in the X-MMS-IM-FORMAT header. This flaw allows remote attackers to execute arbitrary c...

CVE-2008-2407

Stack-based buffer overflow in AIM.DLL in Cerulean Studios Trillian before 3.1.10.0 allows user-assisted remote attackers to execute arbitrary code via a long attribute value in a FONT tag in a message...

CVE-2008-2409

Stack-based buffer overflow in Cerulean Studios Trillian before 3.1.10.0 allows remote attackers to execute arbitrary code via unspecified attributes in the X-MMS-IM-FORMAT header in an MSN message...

Trillian多个远程溢出漏洞

BUGTRAQ ID: 29330 Trillian是一个聊天程序，和多种即时通讯程序使用相同的接口，包括AIM、ICQ、Yahoo! Messenger、MSN Messenger和IRC。 Trillian中负责解析MSN协议头的代码中存在栈溢出漏洞，在处理X-MMS-IM-FORMAT头时，有漏洞的代码未经长度检查便将某些属性直接拷贝到了栈上的缓冲区；Trillian在解析FONT标签中带有超长属性值的消息时，sprintf函数将属性的值直接拷贝到了栈缓冲区上；Trillian的talk.dll在解析XML时没有正确的处理IMG标签中的畸形属性，可能导致覆盖过所分配的堆块。...

ZDI-08-030: Trillian Multiple Protocol XML Parsing Memory Corruption Vulnerability

ZDI-08-030: Trillian Multiple Protocol XML Parsing Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-030 May 21, 2008 -- Affected Vendors: Cerulean Studios -- Affected Products: Cerulean Studios Trillian -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

Trillian < 3.1.10.0 Multiple Vulnerabilities

The version of Trillian installed on the remote host reportedly contains several vulnerabilities : - A stack-based buffer overflow in 'aim.dll' triggered when parsing messages with overly long attribute values within the 'FONT' tag. - A memory corruption issue within XML parsing in 'talk.dll'...

Trillian instant messenger multiple security vulnerabilities

Buffer overflows and memory corruptions in AIM/ICQ, MSN and XML-based protocols parsing...

ZDI-08-031: Trillian MSN MIME Header Stack-Based Overflow Vulnerability

ZDI-08-031: Trillian MSN MIME Header Stack-Based Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-031 May 21, 2008 -- Affected Vendors: Cerulean Studios -- Affected Products: Cerulean Studios Trillian -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers...

ZDI-08-029: Trillian AIM.DLL Long HTML Font Parameter Stack Overflow Vulnerability

ZDI-08-029: Trillian AIM.DLL Long HTML Font Parameter Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-029 May 21, 2008 -- Affected Vendors: Cerulean Studios -- Affected Products: Cerulean Studios Trillian -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

Trillian AIM.DLL Long HTML Font Parameter Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trillian. User interaction is required to exploit this vulnerability in that the target must open a malicious image file. The specific flaws exists during the parsing of messages with overly long...

Trillian MSN MIME Header Stack-Based Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cerulean Studios Trillian Pro. Authentication is not required to exploit this vulnerability. The specific flaw exists within the header parsing code for the msn protocol. When processing the...