CVE-2008-5403

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XML tag.

Weaknesses (CWE)

CWE-119

Affected Products (55)

cerulean_studios · trillianvulnerable

cerulean_studios · trillian_provulnerable

...and 5 more

References (20)

http://blog.ceruleanstudios.com/?p=404

Vendor Advisory

http://osvdb.org/50474

http://secunia.com/advisories/33001

Vendor Advisory

http://securityreason.com/securityalert/4702

http://www.securityfocus.com/archive/1/498936/100/0/threaded

http://www.securityfocus.com/bid/32645

http://www.securitytracker.com/id?1021336

http://www.vupen.com/english/advisories/2008/3348

http://www.zerodayinitiative.com/advisories/ZDI-08-079

https://exchange.xforce.ibmcloud.com/vulnerabilities/47100

http://blog.ceruleanstudios.com/?p=404

Vendor Advisory

http://osvdb.org/50474

http://secunia.com/advisories/33001

Vendor Advisory

http://securityreason.com/securityalert/4702

http://www.securityfocus.com/archive/1/498936/100/0/threaded

http://www.securityfocus.com/bid/32645

http://www.securitytracker.com/id?1021336

http://www.vupen.com/english/advisories/2008/3348

http://www.zerodayinitiative.com/advisories/ZDI-08-079

https://exchange.xforce.ibmcloud.com/vulnerabilities/47100