CVE-2002-2366: Buffer Overflow
Published Dec 31, 2002
·Updated
Buffer overflow in the XML parser of Trillian 0.6351, 0.725 and 0.73 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a skin with a long colors file name in trillian.xml.
Affected Software
3 affected components
Cerulean Studios Trillian=0.73
Cerulean Studios Trillian=0.725
Cerulean Studios Trillian=0.6351
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityWeaknessAffected Software
Oct 31, 2007
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2366?
CVE-2002-2366 has a high severity rating due to the potential for remote code execution and denial of service.
2
How do I fix CVE-2002-2366?
To fix CVE-2002-2366, users should upgrade to a later version of Trillian that addresses this buffer overflow vulnerability.
3
What versions of Trillian are affected by CVE-2002-2366?
CVE-2002-2366 affects Trillian versions 0.6351, 0.725, and 0.73.
4
What type of attack does CVE-2002-2366 allow?
CVE-2002-2366 allows remote attackers to cause a denial of service and potentially execute arbitrary code.
5
What component of Trillian is vulnerable in CVE-2002-2366?
The XML parser of Trillian is the component that is vulnerable in CVE-2002-2366.