critical10.0
CVE-2008-5401
Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image …
Impact
Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image filename, related to "AIM IMG Tag Parsing."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cerulean Studios | Trillian | through 3.1.11.0 Versions 0.50, 0.52, 0.60, 0.61, 0.62 |
| Cerulean Studios | Trillian Pro | All versions Versions 1.0, 2.0, 2.01, 3.0, 3.1.5.0 |
| Ceruleanstudios | Trillian | All versions Versions 3.1.0.9, 3.1.9.0 |
| Ceruleanstudios | Trillian Pro | All versions Version 3.1.9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://blog.ceruleanstudios.com/?p=404
- http://osvdb.org/50472
- http://secunia.com/advisories/33001
- http://securityreason.com/securityalert/4700
- http://www.securityfocus.com/archive/1/498932/100/0/threaded
- http://www.securityfocus.com/bid/32645
- http://www.securitytracker.com/id?1021335
- http://www.vupen.com/english/advisories/2008/3348
- http://www.zerodayinitiative.com/advisories/ZDI-08-077
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47093
- http://blog.ceruleanstudios.com/?p=404
- http://osvdb.org/50472
- http://secunia.com/advisories/33001
- http://securityreason.com/securityalert/4700
- http://www.securityfocus.com/archive/1/498932/100/0/threaded
- http://www.securityfocus.com/bid/32645
- http://www.securitytracker.com/id?1021335
- http://www.vupen.com/english/advisories/2008/3348
- http://www.zerodayinitiative.com/advisories/ZDI-08-077
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47093