CVE-2008-5403

CVE-2008-5403 : Heap-based buffer overflow in the XML parser of Trillian’s AIM plugin (aim.dll) allows remote attackers to execute arbitrary code when parsing malformed XML tags. Affected product: Cerulean Studios Trillian (AIM plugin). Vulnerability arises from a boundary/allocation error in XML...

CVE-2008-5401

CVE-2008-5401 affects Trillian Messenger. A stack-based buffer overflow in the image tooltip parsing (AIM IMG Tag Parsing) allows remote code execution via a long image filename and impacts Trillian versions up to 3.1.11.0; vulnerable until 3.1.11.0, with 3.1.12.0 addressing the issue. Remediatio...

CVE-2008-5402

Trillian has a CVE-2008-5402 vulnerability: a double-free in the XML parser before version 3.1.12.0 can enable remote code execution via crafted XML (notably the IMG SRC ID payload). Public sources (ZDI-08-078, OpenVAS entries, and NVD record) corroborate a remote memory corruption/ARiC condition...

CVE-2008-6563

CVE-2008-6563 describes a buffer overflow in the XML parser of Trillian, affected as of version 3.1.9.0 (and possibly earlier). A crafted DTD file can be used by a remote attacker to cause a crash and potentially execute arbitrary code. Public references consistently name Trillian Buffer Overflow...

CVE-2008-2407

CVE-2008-2407 affects Cerulean Studios Trillian prior to 3.1.10.0, specifically a stack-based buffer overflow in AIM.DLL triggered by parsing a long attribute value in a FONT tag within a message. The underlying issue is a buffer overrun via sprintf() during message processing, allowing arbitrary...