← Database

CVE-2008-5402

CRITICAL CVSS: 10.0 Published: 2008-12-10 Modified: 2026-06-16

Description

Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."

Affected Platforms

Ceruleanstudios TrillianCeruleanstudios Trillian ProCerulean Studios Trillian ProCerulean Studios Trillian

Weakness Type

CWE-399

References