CVE-2008-5403
published 2008-12-10CVE-2008-5403: Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed…
PriorityP350critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
7.93%
94.0th percentile
Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XML tag.
Affected
44 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
| cerulean_studios | trillian | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://blog.ceruleanstudios.com/?p=404http://osvdb.org/50474http://secunia.com/advisories/33001http://securityreason.com/securityalert/4702http://www.securityfocus.com/archive/1/498936/100/0/threadedhttp://www.securityfocus.com/bid/32645http://www.securitytracker.com/id?1021336http://www.vupen.com/english/advisories/2008/3348http://www.zerodayinitiative.com/advisories/ZDI-08-079https://exchange.xforce.ibmcloud.com/vulnerabilities/47100http://blog.ceruleanstudios.com/?p=404http://osvdb.org/50474http://secunia.com/advisories/33001http://securityreason.com/securityalert/4702http://www.securityfocus.com/archive/1/498936/100/0/threadedhttp://www.securityfocus.com/bid/32645http://www.securitytracker.com/id?1021336http://www.vupen.com/english/advisories/2008/3348http://www.zerodayinitiative.com/advisories/ZDI-08-079https://exchange.xforce.ibmcloud.com/vulnerabilities/47100
2008-12-10
Published