Cerulean Studios Trillian Word Wrapping UTF-8 Encoded String Heap Buffer Overflow Vulnerability

Bugtraq ID:	24523
Class:	Boundary Condition Error
CVE:	CVE-2007-3305
Remote:	Yes
Local:	No
Published:	Jun 18 2007 12:00AM
Updated:	May 07 2015 05:37PM
Credit:	www.BlurredLogic.com is credited with the discovery of this vulnerability.
Vulnerable:	Cerulean Studios Trillian 3.1.5.1
Not Vulnerable:	Cerulean Studios Trillian 3.1.6.0

Cerulean Studios Trillian Word Wrapping UTF-8 Encoded String Heap Buffer Overflow Vulnerability

Trillian is prone to a heap-based buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

An attacker can exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts will result in a denial of service.

This issue affects Trillian 3.1.5.1; prior versions may also be affected.

Cerulean Studios Trillian Word Wrapping UTF-8 Encoded String Heap Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cerulean Studios Trillian Word Wrapping UTF-8 Encoded String Heap Buffer Overflow Vulnerability

Solution:
The vendor released an update to address this issue. Please see the references for more information.

Cerulean Studios Trillian Word Wrapping UTF-8 Encoded String Heap Buffer Overflow Vulnerability

References:

• Trillian Homepage (Cerulean Studios)
  
• Vulnerability Note VU#187033 (Cerulean Studios Trillian Instant Messenger fails to properly handle 'UTF-8' seq)
  
• iDefense Security Advisory 06.18.07: Cerulean Studios Trillian UTF-8 Word Wrap H ([email protected])
  
• PUBLIC ADVISORY: 06.18.07 Cerulean Studios Trillian UTF-8 Word Wrap Heap Overflo (iDefense Labs )