Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2007-3305
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2007-3305

Description:
Heap-based buffer overflow in Cerulean Studios Trillian 3.x before 3.1.6.0 allows remote attackers to execute arbitrary code via a message sent through the MSN protocol, or possibly other protocols, with a crafted UTF-8 string, which triggers improper memory allocation for word wrapping when a window width is used as a buffer size, a different vulnerability than CVE-2007-2478.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/34918

ST
  1018265

SAID
  Secunia Advisory: SA25736

IDEFENSE
  http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=545

CONFIRM
  http://blog.ceruleanstudios.com/?p=150

CERT-VN
  187033

BID
  24523


Return to the previous page.