Name: Trillian 126.96.36.199 DTD File Buffer Overflow
Software: Trillian 188.8.131.52
Vendor: Cerulean Studios
Description: Trillian 184.108.40.206. Basic(and maybe minor versions and other as Pro) is vulnerable to parser xml format in .dtd file type. The explotation requires that the user download a malformed file and installed in a stixe directory and others. The bug is a function that parse .dtd files with SYSTEM and file identifier.
Download a poc file: http://www.p1mp4m.es/index.php?act=attach&type=post&id=18