Integer overflow in Trillian 0.74 and earlier, and Trillian Pro 2.01 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Trillian | Cerulean_studios | 0.71 (including) | 0.71 (including) |
| Trillian | Cerulean_studios | 0.73 (including) | 0.73 (including) |
| Trillian | Cerulean_studios | 0.74 (including) | 0.74 (including) |
| Trillian | Cerulean_studios | 0.725 (including) | 0.725 (including) |
| Trillian_pro | Cerulean_studios | 1.0 (including) | 1.0 (including) |
| Trillian_pro | Cerulean_studios | 2.0 (including) | 2.0 (including) |
| Trillian_pro | Cerulean_studios | 2.01 (including) | 2.01 (including) |