CVE-2008-5403: Buffer Overflow
Published Dec 9, 2008
·Updated
Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XML tag.
Affected Software
55 affected components
Cerulean Studios Trillian=0.50
Cerulean Studios Trillian=0.52
Cerulean Studios Trillian=0.60
Cerulean Studios Trillian=0.61
Cerulean Studios Trillian=0.62
Cerulean Studios Trillian=0.63
Cerulean Studios Trillian=0.70
Cerulean Studios Trillian=0.71
Cerulean Studios Trillian=0.72
Cerulean Studios Trillian=0.73
Cerulean Studios Trillian=0.74
Cerulean Studios Trillian=0.74c
Cerulean Studios Trillian=0.74d
Cerulean Studios Trillian=0.74e
Cerulean Studios Trillian=0.74f
Cerulean Studios Trillian=0.74g
Cerulean Studios Trillian=0.74i
Cerulean Studios Trillian=0.635
Cerulean Studios Trillian=0.725
Cerulean Studios Trillian=0.6351
Cerulean Studios Trillian=1.0
Cerulean Studios Trillian=1.0
Cerulean Studios Trillian=2.0
Cerulean Studios Trillian=2.0
Cerulean Studios Trillian=2.1
Cerulean Studios Trillian=3.0
Cerulean Studios Trillian=3.0
Cerulean Studios Trillian=3.0
Cerulean Studios Trillian=3.1
Cerulean Studios Trillian=3.1
Cerulean Studios Trillian=3.1
Cerulean Studios Trillian=3.1.0.120
Cerulean Studios Trillian=3.1.0.121
Cerulean Studios Trillian=3.1.5.0
Cerulean Studios Trillian=3.1.5.1
Cerulean Studios Trillian=3.1.6.0
Cerulean Studios Trillian=3.1.7.0
Cerulean Studios Trillian=3.1.8.0
Cerulean Studios Trillian=3.1.9.0
Cerulean Studios Trillian=3.1.9.0
Cerulean Studios Trillian=3.1.9.0
Cerulean Studios Trillian=3.1.10.0
Cerulean Studios Trillian=3.1.11.0
Cerulean Studios Trillian Pro
Cerulean Studios Trillian Pro=1.0
Cerulean Studios Trillian Pro=2.0
Cerulean Studios Trillian Pro=2.01
Cerulean Studios Trillian Pro=3.0
Cerulean Studios Trillian Pro=3.1.5.0
Cerulean Studios Trillian Pro=3.1_build_121
Ceruleanstudios Trillian
Ceruleanstudios Trillian=3.1.0.9
Ceruleanstudios Trillian=3.1.9.0
Ceruleanstudios Trillian Pro
Ceruleanstudios Trillian Pro=3.1.9.0
Event History
Dec 9, 2008
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-5403?
CVE-2008-5403 has a high severity rating due to its ability to allow remote attackers to execute arbitrary code.
2
How do I fix CVE-2008-5403?
To fix CVE-2008-5403, update to Trillian version 3.1.12.0 or later, which contains the necessary patch.
3
What software versions are vulnerable to CVE-2008-5403?
CVE-2008-5403 affects several versions of Trillian, including 2.0 and the 3.1.x series up to 3.1.11.0.
4
What type of vulnerability is CVE-2008-5403?
CVE-2008-5403 is classified as a heap-based buffer overflow vulnerability in the XML parser.
5
Can CVE-2008-5403 be exploited remotely?
Yes, CVE-2008-5403 can be exploited remotely through crafted XML tags sent to the vulnerable Trillian plugin.