CVE-2006-0543: Medium severity trillian vulnerability

Published Feb 4, 2006

Updated

Cerulean Trillian 3.1.0.120 allows remote attackers to cause a denial of service (client crash) via an AIM message containing the Mac encoded Rich Text Format (RTF) escape sequences (1) \'d1, (2) \'d2, (3) \'d3, (4) \'d4, and (5) \'d5. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Software

1 affected component

Cerulean Studios Trillian=3.1.0.120

Remediation

Patch Available

http://www.osvdb.org/22877

Event History

Feb 4, 2006

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-0543?

CVE-2006-0543 is classified as a denial of service vulnerability.

How do I fix CVE-2006-0543?

To mitigate CVE-2006-0543, users should avoid accepting AIM messages containing Mac encoded RTF sequences or upgrade to a later version of Cerulean Trillian that addresses this vulnerability.

Which version of Trillian is affected by CVE-2006-0543?

CVE-2006-0543 specifically affects Cerulean Trillian version 3.1.0.120.

What kind of attack does CVE-2006-0543 facilitate?

CVE-2006-0543 allows remote attackers to crash the client through crafted AIM messages.

Can CVE-2006-0543 be exploited remotely?

Yes, CVE-2006-0543 can be exploited remotely due to the nature of the denial of service attack via AIM messages.