TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption

TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption http://dvlabs.tippingpoint.com/advisory/TPTI-07-06 May 2, 2007 -- CVE ID: CVE-2007-2418 -- Affected Vendor: Cerulean Studios -- Affected Products: Trillian Pro 3.1 build 121 and below -- TippingPointTM IPS Customer Protection:...

Heap overflow

Multiple heap-based buffer overflows in the IRC component in Cerulean Studios Trillian Pro before 3.1.5.1 allow remote attackers to corrupt memory and possibly execute arbitrary code via 1 a URL with a long UTF-8 string, which triggers the overflow when the user highlights it, or 2 a font HTML ta...

CVE-2007-2478

Multiple heap-based buffer overflows in the IRC component in Cerulean Studios Trillian Pro before 3.1.5.1 allow remote attackers to corrupt memory and possibly execute arbitrary code via 1 a URL with a long UTF-8 string, which triggers the overflow when the user highlights it, or 2 a font HTML ta...

Design/Logic Flaw

Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to obtain potentially sensitive information via long CTCP PING messages that contain UTF-8 characters, which generates a malformed response that is not truncated by a newline, which can cause portions of a server message to be...

CVE-2007-2479

Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to obtain potentially sensitive information via long CTCP PING messages that contain UTF-8 characters, which generates a malformed response that is not truncated by a newline, which can cause portions of a server message to be...

CVE-2007-2479

CVE-2007-2479 affects Cerulean Studios Trillian Pro before 3.1.5.1. The vulnerability arises from processing long CTCP PING messages containing UTF-8 characters, producing a malformed response that is not truncated by a newline, which can cause portions of a server message to be sent to an attack...

CVE-2007-2478

CVE-2007-2478 affects Cerulean Studios Trillian Pro’s IRC component prior to 3.1.5.1. It describes two heap-based buffer overflows triggered by long UTF-8 data: (1) a URL with a long UTF-8 string highlighted by the user, and (2) a font HTML tag with a face attribute containing a long UTF-8 string...

CVE-2007-2478

Multiple heap-based buffer overflows in the IRC component in Cerulean Studios Trillian Pro before 3.1.5.1 allow remote attackers to corrupt memory and possibly execute arbitrary code via 1 a URL with a long UTF-8 string, which triggers the overflow when the user highlights it, or 2 a font HTML ta...

CVE-2007-2479

Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to obtain potentially sensitive information via long CTCP PING messages that contain UTF-8 characters, which generates a malformed response that is not truncated by a newline, which can cause portions of a server message to be...

Trillian < 3.1.5.1 XMPP Decoding Heap Overflow

The version of Trillian installed on the remote host contains a buffer overflow vulnerability which can be triggered when decoding a malformed XMPP eXtensible Messaging and Presence Protocol message. To exploit this flaw, an attacker would need to send a specially crafted XMPP message to a user o...

Heap overflow

Heap-based buffer overflow in the Rendezvous / Extensible Messaging and Presence Protocol XMPP component plugins\rendezvous.dll for Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to execute arbitrary code via a message that triggers the overflow from expansion that occurs...

CVE-2007-2418

Heap-based buffer overflow in the Rendezvous / Extensible Messaging and Presence Protocol XMPP component plugins\rendezvous.dll for Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to execute arbitrary code via a message that triggers the overflow from expansion that occurs...

CVE-2007-2418

Heap-based buffer overflow in the Rendezvous / Extensible Messaging and Presence Protocol XMPP component plugins\rendezvous.dll for Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to execute arbitrary code via a message that triggers the overflow from expansion that occurs...

CVE-2007-2418

CVE-2007-2418 affects Cerulean Studios Trillian Pro prior to 3.1.5.1, in the Rendezvous/XMPP plugin. A heap-based overflow during encoding of an XMPP message in plugins\rendezvous.dll allows remote code execution. Exploitation is remote and no user interaction is required. Cerulean released an up...

iDefense Security Advisory 04.30.07: Cerulean Studios Trillian Multiple IRC Vulnerabilities

Cerulean Studios Trillian Multiple IRC Vulnerabilities iDefense Security Advisory 04.30.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 30, 2007 I. BACKGROUND Cerulean Studios Trillian is a multi-protocol chat application that supports IRC, ICQ, AIM and MSN protocols. More informati...

Trillian < 3.1.5.1 Multiple Vulnerabilities

The version of Trillian installed on the remote host reportedly contains several buffer overflow issues involving its handling of UTF-8 characters. A remote attacker may be able to leverage these issues to execute arbitrary code as the current user. C Tenable Network Security, Inc...

Trillian < 3.1.5.0 Multiple Vulnerabilities

Binary data 3977.prm...

CVE-2006-0543

Cerulean Trillian 3.1.0.120 allows remote attackers to cause a denial of service client crash via an AIM message containing the Mac encoded Rich Text Format RTF escape sequences 1 'd1, 2 'd2, 3 'd3, 4 'd4, and 5 'd5. NOTE: the provenance of this information is unknown; the details are obtained...

Design/Logic Flaw

Cerulean Trillian 3.1.0.120 allows remote attackers to cause a denial of service client crash via an AIM message containing the Mac encoded Rich Text Format RTF escape sequences 1 'd1, 2 'd2, 3 'd3, 4 'd4, and 5 'd5. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2006-0543

Cerulean Trillian 3.1.0.120 is affected by CVE-2006-0543. A remote attacker can crash the Trillian client by sending an AIM message that contains Mac-encoded RTF escape sequences (\’d1, \’d2, \’d3, \’d4, \’d5). The vulnerability is a denial of service against the client; no exploitation details o...