390 matches found
Trillian 3.1.6.0 URI Handler Remote Code Execution Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/24927/info Trillian is prone to remote command- and code-execution vulnerabilities because the application fails to properly handle user-supplied input via a registered URI. Successfully exploiting these issues allows...
Trillian 0.74 IRC PART Message Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5776/info A vulnerability has been reported for Trillian. Reportedly, Trillian is prone to a denial of service condition when certain it receives messages about a user leaving a non-specified channel or a channel that the...
Trillian 0.74 IRC Oversized Data Block Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5777/info A vulnerability has been reported for Trillian. Reportedly, Trillian is prone to a buffer overflow condition when it receives blocks of data that are larger than 4095 bytes. A malicious server may exploit this...
Trillian 0.6351/0.7x Identd Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5733/info Trillian ships with an ident server to facilitate connections to IRC servers that require an ident response before allowing access. A buffer overflow condition exists in the Trillian ident server, which may...
Cerulean Studios Trillian 3.0 - Remote PNG Image File Parsing Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12703/info A remote buffer overflow vulnerability affects Cerulean Studios Trillian. This issue is due to a failure of the application to securely copy image data into finite process buffers. An attacker may leverage this...
Trillian 0.73/0.74 IRC PRIVMSG Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5755/info Trillian is an instant messaging client that supports a number of protocols including IRC, ICQ, MSN. It is available for Microsoft Windows systems. A buffer overflow has been discovered in Trillian version .73 a...
Trillian 0.74 IRC Raw Messages Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5775/info A vulnerability has been reported for Trillian. Reportedly, Trillian is prone to a denial of service condition when certain IRC raw messages are received by the client. This may be exploited by a malicious serve...
Trillian 3.1.9 - DTD File XML Parser Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28747/info Trillian is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. To exploit this issue, an attacker must entice an unsuspecting user to load a...
Trillian 0.725/0.73/0.74 IRC User Mode Numeric Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5769/info Trillian is an instant messaging client that supports a number of protocols including IRC, ICQ, MSN. It is available for Microsoft Windows systems. It has been reported that Trillian does not perform adequate...
Trillian Instant Messaging 0.x Credential Encryption Weakness
No description provided by source. source: http://www.securityfocus.com/bid/5677/info The Trillian instant messaging client uses weak encryption to store saved authentication credentials for instant messaging services. The credentials are encrypted by using XOR with a static key that is used with...
Trillian 0.73/0.74 IRC JOIN Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5765/info The Trillian IRC module does not sufficiently check bounds on JOIN commands. A malicious IRC server may potentially exploit this condition to cause a denial of service or execute arbitrary code with the privileg...
Trillian 0.x IRC Module Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5373/info A buffer overflow condition has been reported in the Trillian IRC module. The condition is due to insecure handling of data extracted from server responses. An attacker in control of a malicious server may explo...
Cerulean Studios Trillian Client 0.74 MSN Module Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11142/info Trillian is reported prone to a remote buffer overflow vulnerability. This issue occurs due to insufficient boundary checks performed by the application and may allow an attacker to execute arbitrary code on a...
CVE-2012-5824
Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, a different vulnerability than...
Design/Logic Flaw
Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, a different vulnerability than...
CVE-2012-5824
Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, a different vulnerability than...
CVE-2012-5824
CVE-2012-5824 affects Trillian 5.1.0.19: it does not verify the server hostname against the certificate's CN or subjectAltName, enabling MITM via an arbitrary valid certificate. CVSSv2 base score 5.8 (Medium). No fix/version details are provided in the supplied documents.
PT-2012-6136
Name of the Vulnerable Software and Affected Versions Trillian version 5.1.0.19 Description The issue arises from the failure to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This allows attackers to spoof S...
CVE-2012-5824: Improper Certificate Validation
Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, a different vulnerability than...
Windows Gather Trillian Password Extractor
This module extracts account password from Trillian & Trillian Astra v4.x-5.x instant messenger. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Trillian Password Extractor',...