NVD

Id
54585  
Name
CVE-2007-2418  
Description
Heap-based buffer overflow in the Rendezvous / Extensible Messaging and Presence Protocol (XMPP) component (plugins endezvous.dll) for Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to execute arbitrary code via a message that triggers the overflow from expansion that occurs during encoding.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-05-02  
Modified Date
2012-11-05  
Seq
2007-2418  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
276828 54585 CVE-2007-2418 http://blog.ceruleanstudios.com/?p=131  View
276829 54585 CVE-2007-2418 http://dvlabs.tippingpoint.com/advisory/TPTI-07-06  View
276830 54585 CVE-2007-2418 20070502 TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption  View
276831 54585 CVE-2007-2418 23781  View
276832 54585 CVE-2007-2418 trillian-xmpp-bo(34059)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53260 JVNDB-2007-001952 Cerulean Studios Trillian Pro の XMPP コンポーネント におけるヒープベースのバッファオーバーフローの脆弱性 Cerulean Studios Trillian Pro の Presence Protocol (XMPP) コンポーネント (plugins endezvous.dll) の Rendezvous / Extensible Messaging には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-2418 25773 CVE-2007-2418 54585 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001952.html 2007-05-02 2012-06-26 View