CVE-2007-2478: Buffer Overflow
Multiple heap-based buffer overflows in the IRC component in Cerulean Studios Trillian Pro before 3.1.5.1 allow remote attackers to corrupt memory and possibly execute arbitrary code via (1) a URL with a long UTF-8 string, which triggers the overflow when the user highlights it, or (2) a font HTML tag with a face attribute containing a long UTF-8 string.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2478?
CVE-2007-2478 is classified as high severity due to potential remote code execution risks.
How do I fix CVE-2007-2478?
To fix CVE-2007-2478, upgrade Cerulean Studios Trillian Pro to version 3.1.5.1 or later.
What causes the vulnerability in CVE-2007-2478?
CVE-2007-2478 is caused by multiple heap-based buffer overflows in the IRC component of Trillian Pro.
Who is affected by CVE-2007-2478?
CVE-2007-2478 affects users of Cerulean Studios Trillian Pro versions prior to 3.1.5.1.
Can CVE-2007-2478 be exploited remotely?
Yes, CVE-2007-2478 can be exploited remotely by attackers sending specially crafted messages.