CVE-2008-2407: Buffer Overflow
Published May 23, 2008
·Updated
Stack-based buffer overflow in AIM.DLL in Cerulean Studios Trillian before 3.1.10.0 allows user-assisted remote attackers to execute arbitrary code via a long attribute value in a FONT tag in a message.
Affected Software
1 affected component
Ceruleanstudios Trillian<=3.1.9.0
Remediation
Patch Available
Event History
May 23, 2008
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-2407?
CVE-2008-2407 has a high severity rating due to the potential for remote code execution.
2
How do I fix CVE-2008-2407?
To fix CVE-2008-2407, upgrade to Cerulean Studios Trillian version 3.1.10.0 or later.
3
What is the impact of CVE-2008-2407?
The impact of CVE-2008-2407 includes unauthorized code execution if a user interacts with a malicious message.
4
Which versions of Trillian are affected by CVE-2008-2407?
All versions of Cerulean Studios Trillian prior to 3.1.10.0 are affected by CVE-2008-2407.
5
Is CVE-2008-2407 a zero-day vulnerability?
CVE-2008-2407 is not a zero-day vulnerability, as it was disclosed and has available fixes.