Approved changes feed: RSS · Atom

cpe:2.3:a:cerulean_studios:trillian:3.1.6.0:*:*:*:*:*:*:*

part: a version: 3.1.6.0 update: *

VendorCerulean Studios (1e4c08ff-9d7c-536e-ada3-2b62ae4cdeed)
ProductTrillian (fa4072ca-af4c-5b9b-b949-6dab5527dbb1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-5403 vulnerable 2026-06-08 04:50:51.440042 Details available
Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XML tag.
Published: 2008-12-09T11:00:00.000Z
Updated: 2024-08-07T10:49:12.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5402 vulnerable 2026-06-08 04:50:51.433807 Details available
Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."
Published: 2008-12-09T11:00:00.000Z
Updated: 2024-08-07T10:49:12.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5401 vulnerable 2026-06-08 04:50:51.421194 Details available
Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image filename, related to "AIM IMG Tag Parsing."
Published: 2008-12-09T11:00:00.000Z
Updated: 2024-08-07T10:49:12.541Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2409 vulnerable 2026-06-08 04:50:23.981127 Details available
Stack-based buffer overflow in Cerulean Studios Trillian before 3.1.10.0 allows remote attackers to execute arbitrary code via unspecified attributes in the X-MMS-IM-FORMAT header in an MSN message.
Published: 2008-05-23T15:00:00.000Z
Updated: 2024-08-07T08:58:02.598Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3833 vulnerable 2026-06-08 04:49:55.132385 Details available
The AOL Instant Messenger (AIM) protocol handler in Cerulean Studios Trillian allows remote attackers to create files with arbitrary contents via certain aim: URIs, as demonstrated by a URI that begins with the "aim: &c:\" substring and contains a full pathname in the ini field. NOTE: this can be leveraged for code execution by writing to a Startup folder.
Published: 2007-07-17T22:00:00.000Z
Updated: 2024-08-07T14:28:52.576Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3832 vulnerable 2026-06-08 04:49:55.131956 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.