CVE-2008-2008: Buffer Overflow

Published Apr 29, 2008

Updated

Buffer overflow in the Display Names message feature in Cerulean Studios Trillian Basic and Pro 3.1.9.0 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long nickname in an MSN protocol message.

Affected Software

2 affected components

Cerulean Studios Trillian=3.1.9.0

Event History

Apr 29, 2008

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2008?

CVE-2008-2008 is classified as a critical vulnerability due to its potential for remote code execution and denial of service.

How do I fix CVE-2008-2008?

To mitigate CVE-2008-2008, update Cerulean Studios Trillian to the latest version or implement a workaround by restricting input lengths.

What software is affected by CVE-2008-2008?

CVE-2008-2008 affects Cerulean Studios Trillian Basic and Pro version 3.1.9.0.

What type of vulnerability is CVE-2008-2008?

CVE-2008-2008 is a buffer overflow vulnerability that can be exploited via long nicknames in MSN protocol messages.

Can CVE-2008-2008 lead to remote attacks?

Yes, CVE-2008-2008 can allow remote attackers to execute arbitrary code or cause a denial of service.