CVE-2008-2008

Buffer overflow in the Display Names message feature in Cerulean Studios Trillian Basic and Pro 3.1.9.0 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long nickname in an MSN protocol message.

Link	Resource
http://www.securityfocus.com/bid/28925
http://secunia.com/advisories/29952	Vendor Advisory
http://securityreason.com/securityalert/3849
http://www.vupen.com/english/advisories/2008/1368/references
http://www.securityfocus.com/archive/1/491281/100/0/threaded

Configuration 1

cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:pro:*:*:*:*:* cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:basic:*:*:*:*:*

---

Published : 2008-04-29 01:09

Updated : 2018-10-11 08:38

---

NVD link : CVE-2008-2008

Mitre link : CVE-2008-2008

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer