Tw33K

Name of the Vulnerable Software and Affected Versions: Cerulean Studios Trillian Pro versions prior to 3.1.10.0 Description: The issue is related to a heap-based buffer overflow in the XML parsing functionality, specifically in the talk.dll component. This allows remote attackers to execute arbitrary code via a malformed attribute in an IMG tag. Recommendations: For versions prior to 3.1.10.0, update to version 3.1.10.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the XML parsing functionality in talk.dll until a patch is applied.

Name of the Vulnerable Software and Affected Versions: Cerulean Studios Trillian versions prior to 3.1.10.0 Description: The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This is achieved via unspecified attributes in the `X-MMS-IM-FORMAT` header in an MSN message. Recommendations: For versions prior to 3.1.10.0, update to version 3.1.10.0 or later to resolve the issue. As a temporary workaround, consider restricting the handling of MSN messages with the `X-MMS-IM-FORMAT` header until a patch is applied.