CVEvulnerability
CVE-2008-5402
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-12-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."
Affected configurations
• cerulean studios trillian 0.50
• cerulean studios trillian 0.52
• cerulean studios trillian 0.60
• cerulean studios trillian 0.61
• cerulean studios trillian 0.62
• cerulean studios trillian 0.63
• cerulean studios trillian 0.70
• cerulean studios trillian 0.71
• cerulean studios trillian 0.72
• cerulean studios trillian 0.73
• cerulean studios trillian 0.74
• cerulean studios trillian 0.74c
• cerulean studios trillian 0.74d
• cerulean studios trillian 0.74e
• cerulean studios trillian 0.74f
• cerulean studios trillian 0.74g
• cerulean studios trillian 0.74i
• cerulean studios trillian 0.635
• cerulean studios trillian 0.725
• cerulean studios trillian 0.6351
• cerulean studios trillian 1.0
• cerulean studios trillian 2.0
• cerulean studios trillian 2.1
• cerulean studios trillian 3.0
• cerulean studios trillian 3.1
• cerulean studios trillian 3.1.0.120
• cerulean studios trillian 3.1.0.121
• cerulean studios trillian 3.1.5.0
• cerulean studios trillian 3.1.5.1
• cerulean studios trillian 3.1.6.0
• cerulean studios trillian 3.1.7.0
• cerulean studios trillian 3.1.8.0
• cerulean studios trillian 3.1.9.0
• cerulean studios trillian 3.1.10.0
• cerulean studios trillian 3.1.11.0
• cerulean studios trillian pro
• cerulean studios trillian pro 1.0
• cerulean studios trillian pro 2.0
• cerulean studios trillian pro 2.01
• cerulean studios trillian pro 3.0
• cerulean studios trillian pro 3.1.5.0
• cerulean studios trillian pro 3.1 build 121
• ceruleanstudios trillian
• ceruleanstudios trillian 3.1.0.9
• ceruleanstudios trillian 3.1.9.0
• ceruleanstudios trillian pro
• ceruleanstudios trillian pro 3.1.9.0
Related
Weakness · not in database (1)
References
- http://blog.ceruleanstudios.com/?p=404 blog.ceruleanstudios.com
- http://osvdb.org/50473 osvdb.org
- http://secunia.com/advisories/33001 secunia.com
- http://securityreason.com/securityalert/4701 securityreason.com
- http://www.securityfocus.com/archive/1/498933/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32645 www.securityfocus.com
- http://www.securitytracker.com/id?1021334 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/3348 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-08-078 www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47098 exchange.xforce.ibmcloud.com
- http://blog.ceruleanstudios.com/?p=404 blog.ceruleanstudios.com
- http://osvdb.org/50473 osvdb.org
- http://secunia.com/advisories/33001 secunia.com
- http://securityreason.com/securityalert/4701 securityreason.com
- http://www.securityfocus.com/archive/1/498933/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32645 www.securityfocus.com
- http://www.securitytracker.com/id?1021334 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/3348 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-08-078 www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47098 exchange.xforce.ibmcloud.com