Cerulean Studios Trillian Skins Colors File Name Buffer Overflow Vulnerability
BID:5601
Info
Cerulean Studios Trillian Skins Colors File Name Buffer Overflow Vulnerability
| Bugtraq ID: | 5601 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 31 2002 12:00AM |
| Updated: | Aug 31 2002 12:00AM |
| Credit: | Vulnerability discovery credited to John C. Hennessy <[email protected]>. |
| Vulnerable: |
Cerulean Studios Trillian 0.6351 Cerulean Studios Trillian 0.725 Cerulean Studios Trillian 0.73 |
| Not Vulnerable: | |
Discussion
Cerulean Studios Trillian Skins Colors File Name Buffer Overflow Vulnerability
Trillian is a freely available instant message software package. It is designed for use on the Microsoft Windows operating system.
Trillian skins files are XML forms designed to allow the easy creation of custom interfaces, or "skins" for the Trillian client. When a colors file name of excessive length is supplied in a skin, a buffer overflow occurs. This could make it possible to execute arbitrary code through a malicious skin.
Trillian is a freely available instant message software package. It is designed for use on the Microsoft Windows operating system.
Trillian skins files are XML forms designed to allow the easy creation of custom interfaces, or "skins" for the Trillian client. When a colors file name of excessive length is supplied in a skin, a buffer overflow occurs. This could make it possible to execute arbitrary code through a malicious skin.
Exploit / POC
Cerulean Studios Trillian Skins Colors File Name Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Cerulean Studios Trillian Skins Colors File Name Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Cerulean Studios Trillian Skins Colors File Name Buffer Overflow Vulnerability
References:
References:
- Trillian Homepage (Cerulean Studios)