Cerulean Studios vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2008-5403 Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XMLHigh 10 · Dec 10, 2008
• CVE-2008-5402 Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related High 10 · Dec 10, 2008
• CVE-2008-5401 Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image fHigh 10 · Dec 10, 2008
• CVE-2008-2409 Stack-based buffer overflow in Cerulean Studios Trillian before 3.1.10.0 allows remote attackers to execute arbitrary code via unspecified attributes in the X-MHigh 9.3 · May 23, 2008
• CVE-2008-2008 Buffer overflow in the Display Names message feature in Cerulean Studios Trillian Basic and Pro 3.1.9.0 allows remote attackers to cause a denial of service (crHigh 9.3 · Apr 29, 2008
• CVE-2007-3832 Buffer overflow in the AOL Instant Messenger (AIM) protocol handler in AIM.DLL in Cerulean Studios Trillian allows remote attackers to execute arbitrary code viHigh 9.3 · Jul 17, 2007
• CVE-2007-3305 Heap-based buffer overflow in Cerulean Studios Trillian 3.x before 3.1.6.0 allows remote attackers to execute arbitrary code via a message sent through the MSN High 9.3 · Jun 20, 2007
• CVE-2007-2478 Multiple heap-based buffer overflows in the IRC component in Cerulean Studios Trillian Pro before 3.1.5.1 allow remote attackers to corrupt memory and possibly High 9.3 · May 2, 2007
• CVE-2007-2418 Heap-based buffer overflow in the Rendezvous / Extensible Messaging and Presence Protocol (XMPP) component (plugins\rendezvous.dll) for Cerulean Studios TrilliaHigh 10 · May 2, 2007
• CVE-2005-0633 Buffer overflow in Trillian 3.0 and Pro 3.0 allows remote attackers to execute arbitrary code via a crafted PNG image file.High 7.5 · Mar 2, 2005
• CVE-2004-1666 Buffer overflow in the MSN module in Trillian 0.74i allows remote MSN servers to execute arbitrary code via a long string that ends in a newline character.High 7.5 · Dec 31, 2004
• CVE-2004-2304 Integer overflow in Trillian 0.74 and earlier, and Trillian Pro 2.01 and earlier, allows remote attackers to cause a denial of service and possibly execute arbiHigh 7.5 · Dec 31, 2004
• CVE-2004-2370 Stack-based buffer overflow in Trillian 0.71 through 0.74f and Trillian Pro 1.0 through 2.01 allows remote attackers to execute arbitrary code via a Yahoo MesseHigh 7.5 · Dec 31, 2004
• CVE-2002-1486 Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service and possibly execute aHigh 7.5 · Apr 2, 2003
• CVE-2002-2155 Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via anHigh 7.5 · Dec 31, 2002
• CVE-2002-2156 Buffer overflow in Trillian 0.73 allows remote IRC servers to execute arbitrary code via a long PING response.High 7.5 · Dec 31, 2002
• CVE-2002-2173 Buffer overflow in the IRC module of Trillian 0.725 and 0.73 allowing remote attackers to execute arbitrary code via a long DCC Chat message.High 7.5 · Dec 31, 2002
• CVE-2002-2390 Buffer overflow in the IDENT daemon (identd) in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers to cause a denial of service (crash) and High 10 · Dec 31, 2002