Description
Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image filename, related to "AIM IMG Tag Parsing."
References
- 1021335 vdb-entry
- 32645 vdb-entry
- trillian-xmltags-bo(47093) vdb-entry
- 50472 vdb-entry
- ADV-2008-3348 vdb-entry
- 20081205 ZDI-08-077: Trillian AIM IMG Tag Parsing Stack Overflow Vulnerability mailing-list
- 4700 third-party-advisory
- 33001 third-party-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-08-077
- http://blog.ceruleanstudios.com/?p=404