CVE-2008-2409: Buffer Overflow
Published May 23, 2008
·Updated
Stack-based buffer overflow in Cerulean Studios Trillian before 3.1.10.0 allows remote attackers to execute arbitrary code via unspecified attributes in the X-MMS-IM-FORMAT header in an MSN message.
Affected Software
15 affected components
Cerulean Studios Trillian=3.1.9.0
Cerulean Studios Trillian=0.71
Cerulean Studios Trillian=2.0
Cerulean Studios Trillian=3.1.7.0
Cerulean Studios Trillian=3.1.5.0
Cerulean Studios Trillian=0.6351
Cerulean Studios Trillian=3.1.5.1
Cerulean Studios Trillian=0.73
Cerulean Studios Trillian=0.725
Cerulean Studios Trillian=3.1
Cerulean Studios Trillian=3.0
Cerulean Studios Trillian=0.74i
Cerulean Studios Trillian=3.1.6.0
Cerulean Studios Trillian=0.74
Cerulean Studios Trillian=2.1
Remediation
Patch Available
Event History
May 23, 2008
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-2409?
CVE-2008-2409 is classified as a high-severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2008-2409?
To fix CVE-2008-2409, users should upgrade to Trillian version 3.1.10.0 or later.
3
What are the affected software versions for CVE-2008-2409?
The affected software versions for CVE-2008-2409 include Trillian versions prior to 3.1.10.0.
4
What type of vulnerability is CVE-2008-2409?
CVE-2008-2409 is a stack-based buffer overflow vulnerability.
5
Who can exploit CVE-2008-2409?
CVE-2008-2409 can be exploited by remote attackers via specially crafted MSN messages.