Multiple bugs in trillian instant messaging client updated since 03.08.2002
Published:		09.03.2005
Source:		BUGTRAQ
SecurityVulns ID:		2204
Type:		client
Level:		6/10
Description:		Buffer overflows, format string bugs.

Affected:		CERULIANSTUDIOS : trillian 0.73
		CERULIANSTUDIOS : Trillian 0.74
		CERULIANSTUDIOS : Trillian 1.0
		CERULIANSTUDIOS : Trillian 2.0
		CERULIANSTUDIOS : Trillian 2.01

Original document		tal zeltzer, See-security advisory: Trillian Basic 3.0 PNG Processing Buffer overflow (09.03.2005)
		Komrade, [Full-Disclosure] Cerulean Studios Trillian 0.74i buffer overflow in MSN module (08.09.2004)
		Stefan Esser, Advisory 02/2004: Trillian remote overflows (25.02.2004)
		Spikeman , Trillian Remote DoS Attack - AIM (28.09.2002)
		Lance Fitz-Herbert, *sigh* Trillian multiple DoS's flaws. (28.09.2002)
		Lance Fitz-Herbert, And Again. Trillian 'raw 221' Overflow. (28.09.2002)
		Lance Fitz-Herbert, Yet Another. Trillian 'JOIN' Overflow. (21.09.2002)
		Lance Fitz-Herbert, Trillian .73 & .74 "PRIVMSG" Overflow. (19.09.2002)
		Jose Nazario, trillian DoS: trillian 1.0 pro also vulnerable (19.09.2002)
		Lance Fitz-Herbert, Trillian .74 and below, ident flaw. (19.09.2002)
		John C. Hennessy, trillian buffer overflow (03.08.2002)
		josh_(at)_pulltheplug.com, Two more exploitable holes in the trillian irc module (03.08.2002)

Files:		Proof of concept exploit for trillians irc module.
		Cerulean Studios Trillian 0.74i Buffer Overflow in MSN module exploit
		Trillian 3.0 PNG Image Processing Buffer overflow Exploit
Discuss:		Read or add your comments to this news (0 comments)