First published: Fri Dec 31 2004(Updated: )
Buffer overflow in the MSN module in Trillian 0.74i allows remote MSN servers to execute arbitrary code via a long string that ends in a newline character.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Cerulean Studios Trillian | =0.74i |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-1666 is classified as a critical vulnerability due to its potential to allow remote code execution.
To fix CVE-2004-1666, upgrade to a version of Trillian newer than 0.74i that does not contain this buffer overflow flaw.
CVE-2004-1666 is a buffer overflow vulnerability affecting the MSN module in Trillian.
Users of Trillian version 0.74i are vulnerable to CVE-2004-1666.
Yes, CVE-2004-1666 can be exploited remotely by sending a specifically crafted input to the affected software.