CVE-2005-0874: Buffer Overflow
Published Mar 26, 2005
·Updated
Multiple buffer overflows in the (1) AIM, (2) MSN, (3) RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service (application crash) via a long string in an HTTP 1.1 response header.
Affected Software
1 affected component
Cerulean Studios Trillian=2.0
Event History
Mar 26, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0874?
CVE-2005-0874 is classified as a high severity vulnerability due to its potential to cause application crashes.
2
How do I fix CVE-2005-0874?
To fix CVE-2005-0874, upgrade to a later version of Trillian that addresses this buffer overflow issue.
3
What are the affected versions of Trillian regarding CVE-2005-0874?
CVE-2005-0874 specifically affects Trillian version 2.0.
4
What kind of attack does CVE-2005-0874 facilitate?
CVE-2005-0874 allows remote attackers to conduct denial of service attacks by sending overly long HTTP 1.1 response headers.
5
Are there workarounds for CVE-2005-0874?
There are no effective workarounds for CVE-2005-0874; the best mitigation is to update Trillian to a fixed version.