CVE-2008-5403

CVE-2008-5403 : Heap-based buffer overflow in the XML parser of Trillian’s AIM plugin (aim.dll) allows remote attackers to execute arbitrary code when parsing malformed XML tags. Affected product: Cerulean Studios Trillian (AIM plugin). Vulnerability arises from a boundary/allocation error in XML...

CVE-2008-5402

Trillian has a CVE-2008-5402 vulnerability: a double-free in the XML parser before version 3.1.12.0 can enable remote code execution via crafted XML (notably the IMG SRC ID payload). Public sources (ZDI-08-078, OpenVAS entries, and NVD record) corroborate a remote memory corruption/ARiC condition...

CVE-2005-0633

The CVE-2005-0633 issue affects Trillian 3.0 and Trillian Pro 3.0. It is described as a buffer overflow that allows remote attackers to execute arbitrary code through a crafted PNG image file. The available sources consistently state remote code execution is possible due to the overflow, but do n...

CVE-2008-5401

CVE-2008-5401 affects Trillian Messenger. A stack-based buffer overflow in the image tooltip parsing (AIM IMG Tag Parsing) allows remote code execution via a long image filename and impacts Trillian versions up to 3.1.11.0; vulnerable until 3.1.11.0, with 3.1.12.0 addressing the issue. Remediatio...

CVE-2002-2390

CVE-2002-2390 concerns a buffer overflow in the IDENT daemon (identd) used by Trillian. Affects Trillian versions 0.6351, 0.725, 0.73, 0.74 and 1.0 pro; vulnerability arises from handling a long request, enabling remote denial of service (crash) and potentially arbitrary code execution. Public de...

CVE-2007-2478

CVE-2007-2478 affects Cerulean Studios Trillian Pro’s IRC component prior to 3.1.5.1. It describes two heap-based buffer overflows triggered by long UTF-8 data: (1) a URL with a long UTF-8 string highlighted by the user, and (2) a font HTML tag with a face attribute containing a long UTF-8 string...

CVE-2004-2304

CVE-2004-2304 affects Trillian (0.74 and earlier) and Trillian Pro (2.01 and earlier). The issue is an integer/heap-based buffer overflow triggered by a DirectIM packet, enabling remote denial of service and potentially arbitrary code execution. Connected sources reference a DirectIM overflow in ...

CVE-2004-2370

CVE-2004-2370 describes a stack-based buffer overflow in Trillian 0.71–0.74f and Trillian Pro 1.0–2.01 that allows remote attackers to execute arbitrary code via a Yahoo Messenger packet with a long key name. Affected component: Trillian client software; root cause: stack-based overflow in proces...

CVE-2007-2418

CVE-2007-2418 affects Cerulean Studios Trillian Pro prior to 3.1.5.1, in the Rendezvous/XMPP plugin. A heap-based overflow during encoding of an XMPP message in plugins\rendezvous.dll allows remote code execution. Exploitation is remote and no user interaction is required. Cerulean released an up...

CVE-2005-2444

The CVE-2005-2444 issue affects Trillian Pro 3.1 build 121. When checking Yahoo mail, the application stores the Yahoo password in plaintext in a world-readable file and does not delete the file after login. This creates a local-privilege risk where users on the same machine can read sensitive cr...