CVE

Id
25835  
CVE No.
CVE-2007-2478  
Status
Candidate  
Description
Multiple heap-based buffer overflows in the IRC component in Cerulean Studios Trillian Pro before 3.1.5.1 allow remote attackers to corrupt memory and possibly execute arbitrary code via (1) a URL with a long UTF-8 string, which triggers the overflow when the user highlights it, or (2) a font HTML tag with a face attribute containing a long UTF-8 string.  
Phase
Assigned (20070502)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
259266 25835 CVE-2007-2478 IDEFENSE:20070501 Cerulean Studios Trillian Multiple IRC Vulnerabilities  View
259267 25835 CVE-2007-2478 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=522  View
259268 25835 CVE-2007-2478 CONFIRM:http://blog.ceruleanstudios.com/?p=131  View
259269 25835 CVE-2007-2478 BID:23730  View
259270 25835 CVE-2007-2478 URL:http://www.securityfocus.com/bid/23730  View
259271 25835 CVE-2007-2478 OSVDB:35721  View
259272 25835 CVE-2007-2478 URL:http://osvdb.org/35721  View
259273 25835 CVE-2007-2478 VUPEN:ADV-2007-1596  View
259274 25835 CVE-2007-2478 URL:http://www.vupen.com/english/advisories/2007/1596  View
259275 25835 CVE-2007-2478 SECTRACK:1017982  View
259276 25835 CVE-2007-2478 URL:http://www.securitytracker.com/id?1017982  View
259277 25835 CVE-2007-2478 SECUNIA:25086  View
259278 25835 CVE-2007-2478 URL:http://secunia.com/advisories/25086  View
259279 25835 CVE-2007-2478 XF:trillian-fontface-bo(33986)  View
259280 25835 CVE-2007-2478 URL:http://xforce.iss.net/xforce/xfdb/33986  View
259281 25835 CVE-2007-2478 XF:trillian-urlhighlight-bo(33985)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55104 JVNDB-2007-003796 Linux kernel の net/ipv4/udp.c におけるローカルトラフィックを傍受される脆弱性 Linux kernel の net/ipv4/udp.c の _udp_lib_get_port 関数は、ワイルドカードのローカルアドレスとポートがバインドされている際、ローカルアドレスとポートのバインドを制限しないため、デーモンおよびその他のアプリケーションに対するローカルトラフィックを傍受される脆弱性が存在します。 CVE-2007-2480 25835 4.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003796.html  View