PT-2005-3965 · Cerulean Studios · Trillian

Philipp Kolmann · Published 2005-10-05 · Updated 2016-10-18 · CVE-2005-3141

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cerulean Studios Trillian version 3.0

Description The issue allows remote attackers to cause a denial of service, resulting in the application crashing. This is triggered when a reverse direct connection is made using the ICQ protocol with a different ICQ client.

Recommendations For version 3.0, consider disabling the ICQ protocol or restricting reverse direct connections to prevent the denial of service. As a temporary workaround, avoid using the ICQ protocol with different ICQ clients until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2005-3141

Affected Products

Trillian

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-3141 · Security Note
• http://ceruleanstudios.com/forums/showthread.php?s=84987af3601384b1dc7ea1f36b237c9c&threadid=64889 · Note
• http://marc.info/?l=bugtraq&m=112837909626441&w=2 · Note
• http://sourceforge.net/mailarchive/forum.php?thread_id=8315933&forum_id=5420 · Note
• http://securityreason.com/securityalert/43 · Note
• http://marc.theaimsgroup.com/?l=bugtraq&m=112837909626441&w=2 · Note
• http://osvdb.org/20006 · Note