7.5

CVE-2004-2304

Integer overflow in Trillian 0.74 and earlier, and Trillian Pro 2.01 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cerulean Studios ≫ Trillian Version0.71
Cerulean Studios ≫ Trillian Version0.73
Cerulean Studios ≫ Trillian Version0.74
Cerulean Studios ≫ Trillian Version0.725
Cerulean Studios ≫ Trillian Pro Version2.01
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.8% 0.886
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/bid/9489
Patch
http://lists.seifried.org/pipermail/security/2004-February/001869.html
Patch
Vendor Advisory
http://secunia.com/advisories/10973
http://security.e-matters.de/advisories/022004.html
Patch
Vendor Advisory
http://securitytracker.com/id?1009220
http://www.osvdb.org/4056
https://exchange.xforce.ibmcloud.com/vulnerabilities/15303