CVE-2008-5403

Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XML tag.

Link	Resource
http://www.zerodayinitiative.com/advisories/ZDI-08-079
http://www.securityfocus.com/bid/32645
http://www.securitytracker.com/id?1021336
http://secunia.com/advisories/33001	Vendor Advisory
http://blog.ceruleanstudios.com/?p=404	Vendor Advisory
http://osvdb.org/50474
http://securityreason.com/securityalert/4702
http://www.vupen.com/english/advisories/2008/3348
https://exchange.xforce.ibmcloud.com/vulnerabilities/47100
http://www.securityfocus.com/archive/1/498936/100/0/threaded

Configuration 1

cpe:2.3:a:cerulean_studios:trillian_pro:2.0:*:*:*:*:*:*:* cpe:2.3:a:ceruleanstudios:trillian:3.1.0.9:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:3.1.8.0:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:0.635:*:*:*:*:*:*:* cpe:2.3:a:ceruleanstudios:trillian_pro:*:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:0.71:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:3.0:*:basic:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:2.0:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:pro:*:*:*:*:* cpe:2.3:a:ceruleanstudios:trillian_pro:3.1.9.0:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:1.0:*:pro:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian_pro:2.01:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:3.1.7.0:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:0.70:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:3.1.5.0:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:0.74g:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:0.6351:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:basic:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian_pro:1.0:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian_pro:3.1_build_121:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:0.74e:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:0.61:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:0.62:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:3.1.10.0:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:3.1.5.1:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:3.1.11.0:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:0.73:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:1.0:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:0.725:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:3.1:*:*:*:*:*:*:* cpe:2.3:a:ceruleanstudios:trillian:*:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:3.0:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:3.1:*:basic:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:0.60:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:2.0:*:pro:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:3.1.0.121:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:0.52:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian_pro:*:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:0.72:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:0.74i:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:3.1.0.120:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:3.1.6.0:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian_pro:3.1.5.0:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:0.74c:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:0.50:*:*:*:*:*:*:* cpe:2.3:a:ceruleanstudios:trillian:3.1.9.0:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:0.74f:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:0.74:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:3.0:*:pro:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:0.74d:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:3.1:*:pro:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:0.63:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian_pro:3.0:*:*:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:2.1:*:*:*:*:*:*:*

---

Published : 2008-12-10 06:44

Updated : 2018-10-11 08:55

---

NVD link : CVE-2008-5403

Mitre link : CVE-2008-5403

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer