CVE-2004-2304

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Integer overflow in Trillian 0.74 and earlier, and Trillian Pro 2.01 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.

Ссылки

http://lists.seifried.org/pipermail/security/2004-February/001869.html
Patch
Vendor Advisory
http://secunia.com/advisories/10973
http://security.e-matters.de/advisories/022004.html
Patch
Vendor Advisory
http://securitytracker.com/id?1009220
http://www.osvdb.org/4056
http://www.securityfocus.com/bid/9489
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/15303
http://lists.seifried.org/pipermail/security/2004-February/001869.html
Patch
Vendor Advisory
http://secunia.com/advisories/10973
http://security.e-matters.de/advisories/022004.html
Patch
Vendor Advisory
http://securitytracker.com/id?1009220
http://www.osvdb.org/4056
http://www.securityfocus.com/bid/9489
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/15303

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cerulean_studios:trillian:0.71:*:*:*:*:*:*:*

cpe:2.3:a:cerulean_studios:trillian:0.73:*:*:*:*:*:*:*

cpe:2.3:a:cerulean_studios:trillian:0.74:*:*:*:*:*:*:*

cpe:2.3:a:cerulean_studios:trillian:0.725:*:*:*:*:*:*:*

cpe:2.3:a:cerulean_studios:trillian_pro:1.0:*:*:*:*:*:*:*

cpe:2.3:a:cerulean_studios:trillian_pro:2.0:*:*:*:*:*:*:*

cpe:2.3:a:cerulean_studios:trillian_pro:2.01:*:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.03243

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-xrx4-hghv-p3q8

github

почти 4 года назад