CVE:CVE-2004-2370
CNNVD:CNNVD-200412-742
Trillian 0.71至0.74f和Trillian Pro 1.0至2.01存在基于堆栈的缓冲区溢出漏洞。远程攻击者借助具有超长密钥名的Yahoo Messenger包执行任意代码。
solution:Upgrade cerulean_studios trillian to a higher version than 0.71,0.73,0.74,0.74b,0.74c,0.74d,0.74e,0.74f,0.74g,0.725,and avoid the version 0.71,0.73,0.74,0.74b,0.74c,0.74d,0.74e,0.74f,0.74g,0.725; Upgrade cerulean_studios trillian_pro to a higher version than 1.0,2.0,2.01,and avoid the version 1.0,2.0,2.01