Detections
Analytics
Trillian < 3.1.12.0 Multiple Vulnerabilities
high Nessus Plugin ID 35042
Synopsis
The remote host contains an instant messaging application that is affected by several vulnerabilities.Description
The version of Trillian installed on the remote host reportedly contains several vulnerabilities :- A stack-based buffer overflow in the tool tip processing code could allow an unauthenticated attacker to execute arbitrary code with client privileges on the remote system. (ZDI-08-077)
- A vulnerability in the XML processing code responsible for handling specially formulated XML could lead to arbitrary code execution on the remote system.
(ZDI-08-078)
- A vulnerability in XML processing code responsible for handling malformed XML tags could lead to arbitrary code execution on the remote system.
(ZDI-08-079)
Solution
Upgrade to Trillian 3.1.12.0 or later.See Also
https://www.zerodayinitiative.com/advisories/ZDI-08-077/
https://www.zerodayinitiative.com/advisories/ZDI-08-078/
https://www.zerodayinitiative.com/advisories/ZDI-08-079/
https://seclists.org/fulldisclosure/2008/Dec/108
https://seclists.org/fulldisclosure/2008/Dec/109
https://seclists.org/fulldisclosure/2008/Dec/110
http://web.archive.org/web/20160322091015/http://blog.trillian.im/?p=404
Plugin Details
Severity: High
ID: 35042
File Name: trillian_3_1_12_0.nasl
Version: 1.16
Type: local
Agent: windows
Family: Windows
Published: 12/5/2008
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:trillian:trillian
Required KB Items: SMB/Trillian/Version
Exploit Ease: No known exploits are available
Reference Information
CVE: CVE-2008-5401, CVE-2008-5402, CVE-2008-5403
BID: 32645