Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Trillian IRC PRIVMSG Buffer Overflow Vulnerability

Trillian is an instant messaging client that supports a number of protocols (including IRC, ICQ, MSN). It is available for Microsoft Windows systems.

A buffer overflow has been discovered in Trillian version .73 and .74. When processing a PRIVMSG command with an overly large sender name, a buffer overflow will occur resulting in memory corruption and a denial of service.

Although not yet confirmed, because memory can be overwritten, it may be possible for arbitrary attacker-supplied code to be executed with the privileges of the client.







 

Privacy Statement
Copyright 2009, SecurityFocus