CVE-2007-3305: Buffer Overflow
Heap-based buffer overflow in Cerulean Studios Trillian 3.x before 3.1.6.0 allows remote attackers to execute arbitrary code via a message sent through the MSN protocol, or possibly other protocols, with a crafted UTF-8 string, which triggers improper memory allocation for word wrapping when a window width is used as a buffer size, a different vulnerability than CVE-2007-2478.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3305?
CVE-2007-3305 is classified as a high-severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2007-3305?
To fix CVE-2007-3305, upgrade Cerulean Studios Trillian to version 3.1.6.0 or later.
What causes CVE-2007-3305?
CVE-2007-3305 is caused by a heap-based buffer overflow triggered by a crafted UTF-8 string in messages sent through the MSN protocol.
Which versions of Trillian are affected by CVE-2007-3305?
CVE-2007-3305 affects Cerulean Studios Trillian versions prior to 3.1.6.0.
Can CVE-2007-3305 be exploited remotely?
Yes, CVE-2007-3305 can be exploited remotely through specially crafted messages sent to a vulnerable version of Trillian.