Unscored CVE-2007-2418 EUVD-2007-2413GHSA-3qfw-fw67-fvr8

Heap-based buffer overflow in the Rendezvous / Extensible Messaging and Presence Protocol (XMPP) component (plugins\rendezvous.dll) for Cer…

Published May 2, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Heap-based buffer overflow in the Rendezvous / Extensible Messaging and Presence Protocol (XMPP) component (plugins\rendezvous.dll) for Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to execute arbitrary code via a message that triggers the overflow from expansion that occurs during encoding.

References

http://blog.ceruleanstudios.com/?p=131
35720 vdb-entry
23781 vdb-entry
trillian-xmpp-bo(34059) vdb-entry
http://dvlabs.tippingpoint.com/advisory/TPTI-07-06
20070502 TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption mailing-list