CVE-2008-5402
published 2008-12-10CVE-2008-5402: Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related…
PriorityP350critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
7.05%
93.4th percentile
Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."
Affected
44 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://blog.ceruleanstudios.com/?p=404http://osvdb.org/50473http://secunia.com/advisories/33001http://securityreason.com/securityalert/4701http://www.securityfocus.com/archive/1/498933/100/0/threadedhttp://www.securityfocus.com/bid/32645http://www.securitytracker.com/id?1021334http://www.vupen.com/english/advisories/2008/3348http://www.zerodayinitiative.com/advisories/ZDI-08-078https://exchange.xforce.ibmcloud.com/vulnerabilities/47098http://blog.ceruleanstudios.com/?p=404http://osvdb.org/50473http://secunia.com/advisories/33001http://securityreason.com/securityalert/4701http://www.securityfocus.com/archive/1/498933/100/0/threadedhttp://www.securityfocus.com/bid/32645http://www.securitytracker.com/id?1021334http://www.vupen.com/english/advisories/2008/3348http://www.zerodayinitiative.com/advisories/ZDI-08-078https://exchange.xforce.ibmcloud.com/vulnerabilities/47098
2008-12-10
Published