Page 4 of 32 results (0.002 seconds)

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0

Multiple buffer overflows in the (1) AIM, (2) MSN, (3) RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service (application crash) via a long string in an HTTP 1.1 response header. • http://marc.info/?l=bugtraq&m=111171416802350&w=2 http://secunia.com/advisories/14689 http://securitytracker.com/id?1013557 http://www.osvdb.org/15004 •

CVSS: 7.5EPSS: 4%CPEs: 2EXPL: 1

Buffer overflow in Trillian 3.0 and Pro 3.0 allows remote attackers to execute arbitrary code via a crafted PNG image file. • https://www.exploit-db.com/exploits/852 http://marc.info/?l=bugtraq&m=111023000624809&w=2 http://www.securiteam.com/exploits/5KP030KF5E.html http://www.securityfocus.com/bid/12703 http://www.vupen.com/english/advisories/2005/0221 •

CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 4

Buffer overflow in the MSN module in Trillian 0.74i allows remote MSN servers to execute arbitrary code via a long string that ends in a newline character. • https://www.exploit-db.com/exploits/435 http://marc.info/?l=bugtraq&m=109466618609375&w=2 http://secunia.com/advisories/12487 http://unsecure.altervista.org/security/trillian.htm http://unsecure.altervista.org/security/trillianbof.c http://www.securityfocus.com/bid/11142 https://exchange.xforce.ibmcloud.com/vulnerabilities/17292 •

CVSS: 7.5EPSS: 10%CPEs: 13EXPL: 0

Stack-based buffer overflow in Trillian 0.71 through 0.74f and Trillian Pro 1.0 through 2.01 allows remote attackers to execute arbitrary code via a Yahoo Messenger packet with a long key name. • http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017766.html http://secunia.com/advisories/10973 http://security.e-matters.de/advisories/022004.html http://securitytracker.com/id?1009220 http://www.osvdb.org/4060 https://exchange.xforce.ibmcloud.com/vulnerabilities/15304 •

CVSS: 7.5EPSS: 7%CPEs: 7EXPL: 0

Integer overflow in Trillian 0.74 and earlier, and Trillian Pro 2.01 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow. • http://lists.seifried.org/pipermail/security/2004-February/001869.html http://secunia.com/advisories/10973 http://security.e-matters.de/advisories/022004.html http://securitytracker.com/id?1009220 http://www.osvdb.org/4056 http://www.securityfocus.com/bid/9489 https://exchange.xforce.ibmcloud.com/vulnerabilities/15303 •