critical10.0
CVE-2008-5402
Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related…
Impact
Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cerulean Studios | Trillian | Versions 0.50, 0.52, 0.60, 0.61, 0.62, 0.63 |
| Cerulean Studios | Trillian Pro | All versions Versions 1.0, 2.0, 2.01, 3.0, 3.1.5.0 |
| Ceruleanstudios | Trillian | All versions Versions 3.1.0.9, 3.1.9.0 |
| Ceruleanstudios | Trillian Pro | All versions Version 3.1.9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://blog.ceruleanstudios.com/?p=404
- http://osvdb.org/50473
- http://secunia.com/advisories/33001
- http://securityreason.com/securityalert/4701
- http://www.securityfocus.com/archive/1/498933/100/0/threaded
- http://www.securityfocus.com/bid/32645
- http://www.securitytracker.com/id?1021334
- http://www.vupen.com/english/advisories/2008/3348
- http://www.zerodayinitiative.com/advisories/ZDI-08-078
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47098
- http://blog.ceruleanstudios.com/?p=404
- http://osvdb.org/50473
- http://secunia.com/advisories/33001
- http://securityreason.com/securityalert/4701
- http://www.securityfocus.com/archive/1/498933/100/0/threaded
- http://www.securityfocus.com/bid/32645
- http://www.securitytracker.com/id?1021334
- http://www.vupen.com/english/advisories/2008/3348
- http://www.zerodayinitiative.com/advisories/ZDI-08-078
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47098