Approved changes feed: RSS · Atom

cpe:2.3:a:cerulean_studios:trillian:3.1.0.120:*:*:*:*:*:*:*

part: a version: 3.1.0.120 update: *

VendorCerulean Studios (1e4c08ff-9d7c-536e-ada3-2b62ae4cdeed)
ProductTrillian (fa4072ca-af4c-5b9b-b949-6dab5527dbb1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5403 vulnerable 2026-06-08 04:50:51.439974 Details available
Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XML tag.
Published: 2008-12-09T11:00:00.000Z
Updated: 2024-08-07T10:49:12.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5402 vulnerable 2026-06-08 04:50:51.433742 Details available
Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."
Published: 2008-12-09T11:00:00.000Z
Updated: 2024-08-07T10:49:12.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5401 vulnerable 2026-06-08 04:50:51.419006 Details available
Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image filename, related to "AIM IMG Tag Parsing."
Published: 2008-12-09T11:00:00.000Z
Updated: 2024-08-07T10:49:12.541Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0543 vulnerable 2026-06-08 04:48:54.415560 Details available
Cerulean Trillian 3.1.0.120 allows remote attackers to cause a denial of service (client crash) via an AIM message containing the Mac encoded Rich Text Format (RTF) escape sequences (1) \'d1, (2) \'d2, (3) \'d3, (4) \'d4, and (5) \'d5. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2006-02-04T02:00:00.000Z
Updated: 2024-09-16T23:45:55.912Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.