PT-2005-3965 · Cerulean Studios · Trillian

Philipp Kolmann · Publicado 2005-10-05 · Atualizado 2016-10-18 · CVE-2005-3141

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cerulean Studios Trillian version 3.0

Description The issue allows remote attackers to cause a denial of service, resulting in the application crashing. This is triggered when a reverse direct connection is made using the ICQ protocol with a different ICQ client.

Recommendations For version 3.0, consider disabling the ICQ protocol or restricting reverse direct connections to prevent the denial of service. As a temporary workaround, avoid using the ICQ protocol with different ICQ clients until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2005-3141

Produtos afetados

Trillian

Referências · 7

• http://ceruleanstudios.com/forums/showthread.php?s=84987af3601384b1dc7ea1f36b237c9c&threadid=64889 · Nota
• http://marc.info/?l=bugtraq&m=112837909626441&w=2 · Nota
• http://sourceforge.net/mailarchive/forum.php?thread_id=8315933&forum_id=5420 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3141 · Nota de Segurança
• http://securityreason.com/securityalert/43 · Nota
• http://marc.theaimsgroup.com/?l=bugtraq&m=112837909626441&w=2 · Nota
• http://osvdb.org/20006 · Nota