PT-2002-3078 · Cerulean Studios · Trillian

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2366

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Trillian versions 0.6351, 0.725, 0.73

Description The issue is related to a buffer overflow in the XML parser, which can be triggered by a skin with a long colors file name in trillian.xml. This can cause a denial of service (crash) and potentially allow remote attackers to execute arbitrary code.

Recommendations For Trillian version 0.6351, update to a version that fixes the buffer overflow issue in the XML parser. For Trillian version 0.725, update to a version that fixes the buffer overflow issue in the XML parser. For Trillian version 0.73, update to a version that fixes the buffer overflow issue in the XML parser.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2002-2366

Affected Products

Trillian

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-2366 · Security Note
• http://securityfocus.com/bid/5601 · Note
• http://iss.net/security_center/static/9999.php · Note
• http://archives.neohapsis.com/archives/bugtraq/2002-08/0334.html · Note