June 19, 2007 7:54 AM PDT
Trillian critical security update released
- Related Stories
-
Trillian IM flaw exposed
March 25, 2005 -
RIM to bring AOL, Yahoo IMs to BlackBerry
March 14, 2005
Attackers could exploit vulnerabilities in the character encoding for Trillian 3.1.5.1--specifically, the word-wrapping handling of UTF-8, the Unicode Transformation Format used for encoding characters in e-mail, instant messages and Web pages, iDefense Labs warned in its security advisory. The vulnerabilities potentially could affect earlier versions of the Trillian software as well, iDefense said.
Trillian, which supports Yahoo's Instant Messenger, AOL's AIM, MSN Messenger, and Internet-relay chat and ICQ ("I seek you") instant-messaging protocols, could be exploited if users view a malicious message containing an unusually long UTF-8 string. Attackers could then potentially launch a buffer overflow and remotely gain control of a user's system, according to Secunia, which rates the security flaws as "highly critical."
Cerulean Studios has released an update, version 3.1.6.0, to Trillian. iDefense noted that while it identified the MSN protocol as a potential attack vector for the vulnerabilities, other supported protocols may be vulnerable.
See more CNET content tagged:
Trillian,
Cerulean Studios,
iDefense,
security update,
vulnerability







happens to Trillian, they jump all over it and point out it's flaws!
It's almost like their bias against Windows Vista AND Mac OS X...
I hope somebody found the sarcasm in this post.
"
Nicso - http://www.lyricsrec.com/lyrics/billy-joel/index.php
http://www.lyricsrec.com/lyrics/brandy/index.php