CVE-2004-1666

概要

参考情報

• marc.info
• secunia.com/advisories/12487 · Exploit
• unsecure.altervista.org/security/trillian.htm · Exploit
• unsecure.altervista.org/security/trillianbof.c
• securityfocus.com/bid/11142 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/17292

trillian のその他の脆弱性

• CVE-2012-5824中 5.8Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field o…
• CVE-2009-4831中 5.8Cerulean Studios Trillian 3.1 Basic does not check SSL certificates during MSN authentication, which allows remote attackers to obtain MSN c…
• CVE-2008-5403緊急 10.0Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code…
• CVE-2008-5402緊急 10.0Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML …
• CVE-2008-5401緊急 10.0Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary cod…