critical10.0
CVE-2008-5403
Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XM…
Impact
Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XML tag.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cerulean Studios | Trillian | Versions 0.50, 0.52, 0.60, 0.61, 0.62, 0.63 |
| Cerulean Studios | Trillian Pro | All versions Versions 1.0, 2.0, 2.01, 3.0, 3.1.5.0 |
| Ceruleanstudios | Trillian | All versions Versions 3.1.0.9, 3.1.9.0 |
| Ceruleanstudios | Trillian Pro | All versions Version 3.1.9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://blog.ceruleanstudios.com/?p=404
- http://osvdb.org/50474
- http://secunia.com/advisories/33001
- http://securityreason.com/securityalert/4702
- http://www.securityfocus.com/archive/1/498936/100/0/threaded
- http://www.securityfocus.com/bid/32645
- http://www.securitytracker.com/id?1021336
- http://www.vupen.com/english/advisories/2008/3348
- http://www.zerodayinitiative.com/advisories/ZDI-08-079
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47100
- http://blog.ceruleanstudios.com/?p=404
- http://osvdb.org/50474
- http://secunia.com/advisories/33001
- http://securityreason.com/securityalert/4702
- http://www.securityfocus.com/archive/1/498936/100/0/threaded
- http://www.securityfocus.com/bid/32645
- http://www.securitytracker.com/id?1021336
- http://www.vupen.com/english/advisories/2008/3348
- http://www.zerodayinitiative.com/advisories/ZDI-08-079
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47100