CVE-2002-2366

Buffer overflow in the XML parser of Trillian 0.6351, 0.725 and 0.73 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a skin with a long colors file name in trillian.xml...

CVE-2002-2390

Buffer overflow in the IDENT daemon identd in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long request...

CVE-2002-2155

Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string specifiers in the name...

*sigh* Trillian multiple DoS's flaws.

I'm beginning to wonder if the makers of the instant messaging client Trillian, have done any bounds checking in their code. Personally I like trillian, its a nice peice of software, on the outside. Here's three more DoS attacks on trillian, exploitable via a server. I've included some code which...

And Again. Trillian 'raw 221' Overflow.

Discovered: ----------- 02 September 2002 By Me, Lance Fitz-Herbert aka phrizer. Vulnerable Applications: ------------------------ Tested On Trillian .73 and .74, But im guessing older versions are also vulnerable. Impact: ------- Medium-High. This could allow arbitary code to be executed on the...

Trillian Remote DoS Attack - AIM

Advisory Url: http://www.computersecuritynow.com/modules.php?op=modload&name=News&file=article&sid=817&mode=thread&order=0&thold=0 ComputerSecurityNow Advisory Sep 23 2002 Trillian Remote DoS Attack - AIM Spikeman - spikeman at computersecuritynow dot com http://www.computersecuritynow.com/ Thank...

Trillian 0.74 - IRC PART Message Denial of Service

Trillian 0.74 - IRC PART Message Denial of Service // source: https://www.securityfocus.com/bid/5776/info A vulnerability has been reported for Trillian. Reportedly, Trillian is prone to a denial of service condition when certain it receives messages about a user leaving a non-specified channel o...

Trillian 0.74 - IRC Raw Messages Denial of Service

// source: https://www.securityfocus.com/bid/5775/info A vulnerability has been reported for Trillian. Reportedly, Trillian is prone to a denial of service condition when certain IRC raw messages are received by the client. This may be exploited by a malicious server. / Trillian-Dos.c Author: Lan...

Trillian 0.74 - IRC Oversized Data Block Buffer Overflow

// source: https://www.securityfocus.com/bid/5777/info A vulnerability has been reported for Trillian. Reportedly, Trillian is prone to a buffer overflow condition when it receives blocks of data that are larger than 4095 bytes. A malicious server may exploit this condition to cause a denial of...

Trillian 0.74 - IRC Raw Messages Denial of Service

Trillian 0.74 - IRC Raw Messages Denial of Service // source: https://www.securityfocus.com/bid/5775/info A vulnerability has been reported for Trillian. Reportedly, Trillian is prone to a denial of service condition when certain IRC raw messages are received by the client. This may be exploited ...

Trillian 0.74 - IRC Oversized Data Block Buffer Overflow

Trillian 0.74 - IRC Oversized Data Block Buffer Overflow // source: https://www.securityfocus.com/bid/5777/info A vulnerability has been reported for Trillian. Reportedly, Trillian is prone to a buffer overflow condition when it receives blocks of data that are larger than 4095 bytes. A malicious...

Trillian 0.74 - IRC PART Message Denial of Service

// source: https://www.securityfocus.com/bid/5776/info A vulnerability has been reported for Trillian. Reportedly, Trillian is prone to a denial of service condition when certain it receives messages about a user leaving a non-specified channel or a channel that the user is not currently in. It i...

Yet Another. Trillian 'JOIN' Overflow.

Discovered: ----------- 02 September 2002 By Me, Lance Fitz-Herbert aka phrizer. Vulnerable Applications: ------------------------ Tested On Trillian .73 and .74, But im guessing older versions are also vulnerable, and possibly version 1.0 Pro. Impact: ------- Low-High. This could possibly allow...

Trillian 0.7250.730.74 - IRC User Mode Numeric Remote Buffer Overflow

Trillian 0.7250.730.74 - IRC User Mode Numeric Remote Buffer Overflow // source: https://www.securityfocus.com/bid/5769/info Trillian is an instant messaging client that supports a number of protocols including IRC, ICQ, MSN. It is available for Microsoft Windows systems. It has been reported tha...

Trillian 0.725/0.73/0.74 - IRC User Mode Numeric Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/5769/info Trillian is an instant messaging client that supports a number of protocols including IRC, ICQ, MSN. It is available for Microsoft Windows systems. It has been reported that Trillian does not perform adequate bounds checking when receiving IR...

Trillian 0.73/0.74 - IRC JOIN Buffer Overflow

// source: https://www.securityfocus.com/bid/5765/info The Trillian IRC module does not sufficiently check bounds on JOIN commands. A malicious IRC server may potentially exploit this condition to cause a denial of service or execute arbitrary code with the privileges of the client. This issue wa...

Trillian 0.730.74 - IRC JOIN Buffer Overflow

Trillian 0.730.74 - IRC JOIN Buffer Overflow // source: https://www.securityfocus.com/bid/5765/info The Trillian IRC module does not sufficiently check bounds on JOIN commands. A malicious IRC server may potentially exploit this condition to cause a denial of service or execute arbitrary code wit...

Trillian 0.730.74 - IRC PRIVMSG Buffer Overflow

Trillian 0.730.74 - IRC PRIVMSG Buffer Overflow // source: https://www.securityfocus.com/bid/5755/info Trillian is an instant messaging client that supports a number of protocols including IRC, ICQ, MSN. It is available for Microsoft Windows systems. A buffer overflow has been discovered in...

Trillian .74 and below, ident flaw.

Discovered: ----------- 03 September 2002 By Me, Lance Fitz-Herbert aka phrizer. Vulnerable Applications: ------------------------ Tested On Trillian .74 and .73, But im guessing older versions are also vulnerable. Impact: ------- Low-High. This could allow arbitary code to be executed on the...

Trillian .73 & .74 "PRIVMSG" Overflow.

Discovered: ----------- 02 September 2002 By Me, Lance Fitz-Herbert aka phrizer. Vulnerable Applications: ------------------------ Tested On Trillian .74 and .74, But im guessing older versions are also vulnerable. Impact: ------- Low-High. This could possibly allow arbitary code to be executed o...