PT-2002-3078 · Cerulean Studios · Trillian

Publicado

2002-12-31

·

Atualizado

2008-09-05

·

CVE-2002-2366

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Trillian versions 0.6351, 0.725, 0.73
Description The issue is related to a buffer overflow in the XML parser, which can be triggered by a skin with a long colors file name in trillian.xml. This can cause a denial of service (crash) and potentially allow remote attackers to execute arbitrary code.
Recommendations For Trillian version 0.6351, update to a version that fixes the buffer overflow issue in the XML parser. For Trillian version 0.725, update to a version that fixes the buffer overflow issue in the XML parser. For Trillian version 0.73, update to a version that fixes the buffer overflow issue in the XML parser.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2002-2366

Produtos afetados

Trillian