CVE

Id
32524  
CVE No.
CVE-2008-2407  
Status
Candidate  
Description
Stack-based buffer overflow in AIM.DLL in Cerulean Studios Trillian before 3.1.10.0 allows user-assisted remote attackers to execute arbitrary code via a long attribute value in a FONT tag in a message.  
Phase
Assigned (20080522)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
352127 32524 CVE-2008-2407 BUGTRAQ:20080521 ZDI-08-029: Trillian AIM.DLL Long HTML Font Parameter Stack Overflow Vulnerability  View
352128 32524 CVE-2008-2407 URL:http://www.securityfocus.com/archive/1/archive/1/492433/100/0/threaded  View
352129 32524 CVE-2008-2407 MISC:http://www.zerodayinitiative.com/advisories/ZDI-08-029/  View
352130 32524 CVE-2008-2407 BID:29330  View
352131 32524 CVE-2008-2407 URL:http://www.securityfocus.com/bid/29330  View
352132 32524 CVE-2008-2407 VUPEN:ADV-2008-1622  View
352133 32524 CVE-2008-2407 URL:http://www.vupen.com/english/advisories/2008/1622  View
352134 32524 CVE-2008-2407 SECTRACK:1020104  View
352135 32524 CVE-2008-2407 URL:http://securitytracker.com/id?1020104  View
352136 32524 CVE-2008-2407 SECUNIA:30336  View
352137 32524 CVE-2008-2407 URL:http://secunia.com/advisories/30336  View
352138 32524 CVE-2008-2407 XF:trillian-aimdll-bo(42582)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50519 JVNDB-2008-005829 SazCart の index.php における SQL インジェクションの脆弱性 SazCart の index.php には、magic_quotes_gpc が無効になっている際、SQL インジェクションの脆弱性が存在します。 CVE-2008-2411 32524 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005829.html  View