CVE-2008-5402: Double Free
Published Dec 9, 2008
·Updated
Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."
Affected Software
55 affected components
Cerulean Studios Trillian Pro=2.0
Ceruleanstudios Trillian=3.1.0.9
Cerulean Studios Trillian=3.1.8.0
Cerulean Studios Trillian=3.1.9.0
Cerulean Studios Trillian=0.635
Ceruleanstudios Trillian Pro
Cerulean Studios Trillian=0.71
Cerulean Studios Trillian=3.0
Cerulean Studios Trillian=2.0
Cerulean Studios Trillian=3.1.9.0
Ceruleanstudios Trillian Pro=3.1.9.0
Cerulean Studios Trillian=1.0
Cerulean Studios Trillian Pro=2.01
Cerulean Studios Trillian=3.1.7.0
Cerulean Studios Trillian=0.70
Cerulean Studios Trillian=3.1.5.0
Cerulean Studios Trillian=0.74g
Cerulean Studios Trillian=0.6351
Cerulean Studios Trillian=3.1.9.0
Cerulean Studios Trillian Pro=1.0
Cerulean Studios Trillian Pro=3.1_build_121
Cerulean Studios Trillian=0.74e
Cerulean Studios Trillian=0.61
Cerulean Studios Trillian=0.62
Cerulean Studios Trillian=3.1.10.0
Cerulean Studios Trillian=3.1.5.1
Cerulean Studios Trillian=3.1.11.0
Cerulean Studios Trillian=0.73
Cerulean Studios Trillian=1.0
Cerulean Studios Trillian=0.725
Cerulean Studios Trillian=3.1
Ceruleanstudios Trillian
Cerulean Studios Trillian=3.0
Cerulean Studios Trillian=3.1
Cerulean Studios Trillian=0.60
Cerulean Studios Trillian=2.0
Cerulean Studios Trillian=3.1.0.121
Cerulean Studios Trillian=0.52
Cerulean Studios Trillian Pro
Cerulean Studios Trillian=0.72
Cerulean Studios Trillian=0.74i
Cerulean Studios Trillian=3.1.0.120
Cerulean Studios Trillian=3.1.6.0
Cerulean Studios Trillian Pro=3.1.5.0
Cerulean Studios Trillian=0.74c
Cerulean Studios Trillian=0.50
Ceruleanstudios Trillian=3.1.9.0
Cerulean Studios Trillian=0.74f
Cerulean Studios Trillian=0.74
Cerulean Studios Trillian=3.0
Cerulean Studios Trillian=0.74d
Cerulean Studios Trillian=3.1
Cerulean Studios Trillian=0.63
Cerulean Studios Trillian Pro=3.0
Cerulean Studios Trillian=2.1
Event History
Dec 9, 2008
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-5402?
CVE-2008-5402 is considered a critical vulnerability that allows remote attackers to execute arbitrary code.
2
How do I fix CVE-2008-5402?
To fix CVE-2008-5402, users should upgrade Trillian to version 3.1.12.0 or later, where the vulnerability is patched.
3
What software is affected by CVE-2008-5402?
CVE-2008-5402 affects multiple versions of Trillian, including 2.0 and various 3.1.x versions prior to 3.1.12.0.
4
What type of vulnerability is CVE-2008-5402?
CVE-2008-5402 is a double free vulnerability in the XML parser of Trillian.
5
Can CVE-2008-5402 be exploited remotely?
Yes, CVE-2008-5402 can be exploited remotely through a crafted XML expression.