CVE-2008-5401
published 2008-12-10CVE-2008-5401: Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image…
PriorityP350critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
7.93%
94.0th percentile
Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image filename, related to "AIM IMG Tag Parsing."
Affected
44 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cerulean_studios | trillian | <= 3.1.11.0 | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://blog.ceruleanstudios.com/?p=404http://osvdb.org/50472http://secunia.com/advisories/33001http://securityreason.com/securityalert/4700http://www.securityfocus.com/archive/1/498932/100/0/threadedhttp://www.securityfocus.com/bid/32645http://www.securitytracker.com/id?1021335http://www.vupen.com/english/advisories/2008/3348http://www.zerodayinitiative.com/advisories/ZDI-08-077https://exchange.xforce.ibmcloud.com/vulnerabilities/47093http://blog.ceruleanstudios.com/?p=404http://osvdb.org/50472http://secunia.com/advisories/33001http://securityreason.com/securityalert/4700http://www.securityfocus.com/archive/1/498932/100/0/threadedhttp://www.securityfocus.com/bid/32645http://www.securitytracker.com/id?1021335http://www.vupen.com/english/advisories/2008/3348http://www.zerodayinitiative.com/advisories/ZDI-08-077https://exchange.xforce.ibmcloud.com/vulnerabilities/47093
2008-12-10
Published