CVEvulnerability

CVE-2008-5401

10.0 HIGH Published 2008-12-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-12-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image filename, related to "AIM IMG Tag Parsing."

Affected configurations

• cerulean studios trillian (<= 3.1.11.0) • cerulean studios trillian 0.50 • cerulean studios trillian 0.52 • cerulean studios trillian 0.60 • cerulean studios trillian 0.61 • cerulean studios trillian 0.62 • cerulean studios trillian 0.63 • cerulean studios trillian 0.70 • cerulean studios trillian 0.71 • cerulean studios trillian 0.72 • cerulean studios trillian 0.73 • cerulean studios trillian 0.74 • cerulean studios trillian 0.74c • cerulean studios trillian 0.74d • cerulean studios trillian 0.74e • cerulean studios trillian 0.74f • cerulean studios trillian 0.74g • cerulean studios trillian 0.74i • cerulean studios trillian 0.635 • cerulean studios trillian 0.725 • cerulean studios trillian 0.6351 • cerulean studios trillian 1.0 • cerulean studios trillian 2.0 • cerulean studios trillian 2.1 • cerulean studios trillian 3.0 • cerulean studios trillian 3.1 • cerulean studios trillian 3.1.0.120 • cerulean studios trillian 3.1.0.121 • cerulean studios trillian 3.1.5.0 • cerulean studios trillian 3.1.5.1 • cerulean studios trillian 3.1.6.0 • cerulean studios trillian 3.1.7.0 • cerulean studios trillian 3.1.8.0 • cerulean studios trillian 3.1.9.0 • cerulean studios trillian 3.1.10.0 • cerulean studios trillian pro • cerulean studios trillian pro 1.0 • cerulean studios trillian pro 2.0 • cerulean studios trillian pro 2.01 • cerulean studios trillian pro 3.0 • cerulean studios trillian pro 3.1.5.0 • cerulean studios trillian pro 3.1 build 121 • ceruleanstudios trillian • ceruleanstudios trillian 3.1.0.9 • ceruleanstudios trillian 3.1.9.0 • ceruleanstudios trillian pro • ceruleanstudios trillian pro 3.1.9.0

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References