CVE-2004-2370

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in Trillian 0.71 through 0.74f and Trillian Pro 1.0 through 2.01 allows remote attackers to execute arbitrary code via a Yahoo Messenger packet with a long key name.

Affected (13)

Products: Cerulean Studios: Trillian, Trillian Pro

Cerulean Studios

2 products

Trillian

Trillian Pro

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Cerulean Studios Trillian	Version 0.71
Cerulean Studios Trillian	Version 0.725
Cerulean Studios Trillian	Version 0.73
Cerulean Studios Trillian	Version 0.74
Cerulean Studios Trillian	Version 0.74b
Cerulean Studios Trillian	Version 0.74c
Cerulean Studios Trillian	Version 0.74d
Cerulean Studios Trillian	Version 0.74e
Cerulean Studios Trillian	Version 0.74f
Cerulean Studios Trillian	Version 0.74g
Cerulean Studios Trillian Pro	Version 1.0
Cerulean Studios Trillian Pro	Version 2.01
Cerulean Studios Trillian Pro	Version 2.0