What is CVE-2002-2366?

CVE-2002-2366 is a vulnerability in Cerulean Studios Trillian, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2002-12-31.

Is CVE-2002-2366 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Cerulean Studios Trillian

CVE-2002-2366

Buffer overflow in the XML parser of Trillian 0.6351, 0.725 and 0.73 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a skin with a long colors file name in trillian.xml.

Vulnerability class: Buffer Overflow

EPSS: 0.027 (84.5th percentile) — read the EPSS interpretation.

Affected products

Cerulean_studios Trillian — versions 0.73, 0.725, 0.6351
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2002-2366?: CVE-2002-2366 is a vulnerability in Cerulean Studios Trillian, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2002-12-31.
Is CVE-2002-2366 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.