Description
Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XML tag.
References
- 1021336 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-08-079
- 32645 vdb-entry
- 20081205 ZDI-08-079: Trillian AIM Plugin Malformed XML Tag Heap Overflow Vulnerability mailing-list
- ADV-2008-3348 vdb-entry
- 50474 vdb-entry
- trillian-xml-bo(47100) vdb-entry
- 33001 third-party-advisory
- 4702 third-party-advisory
- http://blog.ceruleanstudios.com/?p=404