← Database

CVE-2008-2408

CRITICAL CVSS: 9.3 Published: 2008-05-23 Modified: 2026-06-16

Description

Heap-based buffer overflow in the XML parsing functionality in talk.dll in Cerulean Studios Trillian Pro before 3.1.10.0 allows remote attackers to execute arbitrary code via a malformed attribute in an IMG tag.

Affected Platforms

Ceruleanstudios Trillian Pro

Weakness Type

CWE-119

References