CVE-2008-6563 Buffer overflow in the XML parser in Trillian 3.1.9.0, and possibly earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DTD file.
HighCVSS 9.3
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the XML parser in Trillian 3.1.9.0, and possibly earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DTD file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ceruleanstudios trillian | = 3.1.9.0 | No fix listed |
References
- 51130 vdb-entry
- 20080411 Trillian 3.1.9.0 DTD File Buffer Overflow mailing-list
- 28747 exploit vdb-entry
- trillian-dtd-bo(41782) vdb-entry