Unscored CVE-2008-2407 EUVD-2008-2402GHSA-j525-vjc7-j6rq

Stack-based buffer overflow in AIM.DLL in Cerulean Studios Trillian before 3.1.10.0 allows user-assisted remote attackers to execute arbitr…

Published May 23, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Stack-based buffer overflow in AIM.DLL in Cerulean Studios Trillian before 3.1.10.0 allows user-assisted remote attackers to execute arbitrary code via a long attribute value in a FONT tag in a message.

References

1020104 vdb-entry
trillian-aimdll-bo(42582) vdb-entry
ADV-2008-1622 vdb-entry
29330 vdb-entry
30336 third-party-advisory
20080521 ZDI-08-029: Trillian AIM.DLL Long HTML Font Parameter Stack Overflow Vulnerability mailing-list
http://www.zerodayinitiative.com/advisories/ZDI-08-029/