← Back

CVE-2008-5401

nvd nist
Published: Dec 10, 2008Modified: Apr 23, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image filename, related to "AIM IMG Tag Parsing."

Affected (55)

Cerulean Studios
2 products
Trillian
Trillian Pro
Ceruleanstudios
2 products
Trillian
Trillian Pro
Configuration A
55 vulnerable
Vulnerable SoftwareAffected Versions
Cerulean Studios
Trillian
Up to 3.1.11.0
Trillian
Version 0.50
Trillian
Version 0.52
Trillian
Version 0.60
Trillian
Version 0.61
Trillian
Version 0.62
Trillian
Version 0.6351
Trillian
Version 0.635
Trillian
Version 0.63
Trillian
Version 0.70
Trillian
Version 0.71
Trillian
Version 0.725
Trillian
Version 0.72
Trillian
Version 0.73
Trillian
Version 0.74
Trillian
Version 0.74c
Trillian
Version 0.74d
Trillian
Version 0.74e
Trillian
Version 0.74f
Trillian
Version 0.74g
Trillian
Version 0.74i
Trillian
Version 1.0
Trillian
Version 1.0
Trillian
Version 2.0
Trillian
Version 2.0
Trillian
Version 2.1
Trillian
Version 3.0
Trillian
Version 3.0
Trillian
Version 3.0
Trillian
Version 3.1.0.120
Trillian
Version 3.1.0.121
Trillian
Version 3.1.10.0
Trillian
Version 3.1.5.0
Trillian
Version 3.1.5.1
Trillian
Version 3.1.6.0
Trillian
Version 3.1.7.0
Trillian
Version 3.1.8.0
Trillian
Version 3.1.9.0
Trillian
Version 3.1.9.0
Trillian
Version 3.1.9.0
Trillian
Version 3.1
Trillian
Version 3.1
Trillian
Version 3.1
Cerulean Studios
Trillian Pro
All versions
Trillian Pro
Version 1.0
Trillian Pro
Version 2.01
Trillian Pro
Version 2.0
Trillian Pro
Version 3.0
Trillian Pro
Version 3.1.5.0
Trillian Pro
Version 3.1_build_121
Ceruleanstudios
Trillian
All versions
Trillian
Version 3.1.0.9
Trillian
Version 3.1.9.0
Ceruleanstudios
Trillian Pro
All versions
Trillian Pro
Version 3.1.9.0

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (20)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.