|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Trillian 3.1.9.0 DTD File Buffer Overflow
david130490
hotmail.com
Date: Fri Apr 11 2008 - 11:46:24 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Name:
Trillian 3.1.9.0 DTD File Buffer Overflow
Software:
Trillian 3.1.9.0
Vendor:
Cerulean Studios
Description:
Trillian 3.1.9.0. Basic(and maybe minor versions and other as Pro) is vulnerable to parser xml format in .dtd file type. The explotation requires that the user download a malformed file and installed in a stixe directory and others. The bug is a function that parse .dtd files with SYSTEM and file identifier.
Web:
http://www.ceruleanstudios.com/
Download a poc file:
http://www.p1mp4m.es/index.php?act=attach&type=post&id=18
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]