Description
Integer overflow in Trillian 0.74 and earlier, and Trillian Pro 2.01 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.
References
- 9489 vdb-entry
- http://security.e-matters.de/advisories/022004.html
- 10973 third-party-advisory
- trillian-directim-bo(15303) vdb-entry
- 1009220 vdb-entry
- 20040224 Advisory 02/2004: Trillian remote overflows mailing-list
- 4056 vdb-entry