vendor:
Trillian
by:
Lance Fitz-Herbert
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Trillian
Affected Version From: 0.73
Affected Version To: 0.74
Patch Exists: NO
Related CWE: Unknown
CPE: a:trillian:trillian
Platforms Tested: Windows
Unknown
Trillian Privmsg Flaw
A buffer overflow has been discovered in Trillian version .73 and .74. When processing a PRIVMSG command with an overly large sender name, a buffer overflow will occur resulting in memory corruption and a denial of service. Although not yet confirmed, because memory can be overwritten, it may be possible for arbitrary attacker-supplied code to be executed with the privileges of the client.
Mitigation:
Apply the latest patch or update to a version that is not affected by this vulnerability.