CVE-2004-2304

CVE-2004-2304 affects Trillian (0.74 and earlier) and Trillian Pro (2.01 and earlier). The issue is an integer/heap-based buffer overflow triggered by a DirectIM packet, enabling remote denial of service and potentially arbitrary code execution. Connected sources reference a DirectIM overflow in ...

CVE-2005-2444

Trillian Pro 3.1 build 121, when checking Yahoo e-mail, stores the password in plaintext in a world readable file and does not delete the file after login, which allows local users to obtain sensitive information...

CVE-2005-2444

The CVE-2005-2444 issue affects Trillian Pro 3.1 build 121. When checking Yahoo mail, the application stores the Yahoo password in plaintext in a world-readable file and does not delete the file after login. This creates a local-privilege risk where users on the same machine can read sensitive cr...

CVE-2005-2444

Trillian Pro 3.1 build 121, when checking Yahoo e-mail, stores the password in plaintext in a world readable file and does not delete the file after login, which allows local users to obtain sensitive information...

Trillian instant messenger cleartext passwords leak

Yahoo Mail passwords are stored in common place with in cleartext...

Trillian Ver 3.1 saves password's in plain Text

Hi Everyone, I was playing around with Trillian Pro 3.1 Build 121 and noticed a very disturbing behavior when using it to check my yahoo mail. When you choose the option to check your yahoo email from Trillian The little connection ball - Check Yahoo Mail it creates a temp file in the Install...

CVE-2005-0875

Multiple buffer overflows in the Yahoo plug-in for Trillian 2.0, 3.0, and 3.1 allow remote web servers to cause a denial of service application crash via a long string in an HTTP 1.1 response header...

CVE-2005-0874

Multiple buffer overflows in the 1 AIM, 2 MSN, 3 RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service application crash via a long string in an HTTP 1.1 response header...

CVE-2005-0874

Multiple buffer overflows in the 1 AIM, 2 MSN, 3 RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service application crash via a long string in an HTTP 1.1 response header...

CVE-2005-0875

Multiple buffer overflows in the Yahoo plug-in for Trillian 2.0, 3.0, and 3.1 allow remote web servers to cause a denial of service application crash via a long string in an HTTP 1.1 response header...

CVE-2005-0874

The CVE-2005-0874 entry covers multiple buffer overflows in Trillian 2.0 plug-ins (AIM, MSN, RSS, and others). The root cause is deficient handling of long strings in an HTTP/1.1 response header, enabling a remote attacker to trigger a denial of service (application crash). Exploitation details a...

CVE-2005-0875

CVE-2005-0875 affects the Yahoo plug-in for Trillian versions 2.0, 3.0, and 3.1. The issue is caused by multiple buffer overflows that allow a remote web server to crash the application (DoS) by sending a long string in an HTTP/1.1 response header. The NVD entry documents this as a denial-of-serv...

Multiple Trillian instant messenger buffer overflows

Multiple buffer overflow on parsing HTTP-based protocols, including RSS...

LogicLibrary BugScan VSR,Trillian 2.0, 3.0 and 3.1

LogicLibrary BugScan Vulnerability Summary Report VSR Trillian 2.0, 3.0 and 3.1 3/23/2005 I. Background This report is based on the example in Guidelines for Security Vulnerability Reporting and Response, provided by the Organization for Internet Safety OIS. The template for this document can b...

Trillian HTTP-parsing Remote Overflow

Binary data 2749.prm...

Trillian Multiple HTTP Responses Buffer Overflow Vulnerabilities

The remote host has the Trillian program installed. Trillian is a Peer2Peer client that allows users to chat and share files with other users across the world. The remote version of this software is vulnerable to several buffer overflows when processing malformed responses. An attacker could...

See-security advisory: Trillian Basic 3.0 PNG Processing Buffer overflow

See-security Technologies ltd. http://www.see-security.com - Product Information Trillian is a fully featured, stand-alone, skinnable chat client that supports AIM, ICQ, MSN, Yahoo Messenger, and IRC. - Vulnerability Description Trillian contains a buffer overflow vulnerability in the way it pars...

Multiple bugs in trillian instant messaging client

Buffer overflows, format string bugs...

CVE-2005-0633

Buffer overflow in Trillian 3.0 and Pro 3.0 allows remote attackers to execute arbitrary code via a crafted PNG image file...

CVE-2005-0633

The CVE-2005-0633 issue affects Trillian 3.0 and Trillian Pro 3.0. It is described as a buffer overflow that allows remote attackers to execute arbitrary code through a crafted PNG image file. The available sources consistently state remote code execution is possible due to the overflow, but do n...