|
|
Info |
Last Modified |
| about 1 year ago |
|
|
|
|
|
Description |
A remote overflow exists in Trillian. Trillian fails to properly validate HTTP 1.1 response headers resulting in a buffer overflow. With a specially crafted request, an attacker can cause the execution of malicious code resulting in a loss of integrity.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Denial of Service,
Input Manipulation
Impact:
Loss of Integrity,
Loss of Availability
Exploit:
Exploit Rumored / Private
|
|
Solution |
Upgrade to version 3.1 or higher, as it has been reported to fix this vulnerability except the issues with Yahoo IM. It is also possible to correct the flaw by implementing the following workaround(s): avoid using the Yahoo IM component until patched
|
|
Products |
|
Trillian
 |
2.0 |
3.0 |
3.1 |
|
|
|
|
Credit |
- Matt Hargett - matt.hargett
 logiclibrary.com -
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
