CVE-2002-1485: Medium severity Cerulean Studios Trillian vulnerability
Published Mar 18, 2003
·Updated
The AIM component of Trillian 0.73 and 0.74 allows remote attackers to cause a denial of service (crash) via certain strings such as "P > O < C".
Affected Software
2 affected components
Cerulean Studios Trillian=0.73
Cerulean Studios Trillian=0.74
Remediation
Patch Available
Event History
Mar 18, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1485?
CVE-2002-1485 has been assigned a severity level that indicates it can cause a denial of service through specific input.
2
How do I fix CVE-2002-1485?
To fix CVE-2002-1485, users should upgrade to a version of Trillian later than 0.74 that contains the necessary patches.
3
What versions of Trillian are affected by CVE-2002-1485?
CVE-2002-1485 affects Trillian versions 0.73 and 0.74.
4
Can CVE-2002-1485 be exploited remotely?
Yes, CVE-2002-1485 can be exploited remotely by sending specially crafted strings to the AIM component.
5
What type of attack does CVE-2002-1485 involve?
CVE-2002-1485 involves a denial of service attack that causes the application to crash.