Trillian
Vendor:
First CVE: Oct 2, 2001 · Active for 24 years
33
Total CVEs
More Total CVEs than 97% of tracked products
3.0
Avg CVEs / Year
Higher CVE frequency than 84% of tracked products
7.1
Avg CVSS
Higher Avg CVSS than 44% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Trillian over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 2, 2001
24 years ago
Most Recent CVE
Nov 4, 2012
5,014 days ago
CVE Severity & Scoring
Trillian33 CVEs
45%
55%
All CVEs353,240 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network1 (3.0%)
Unknown32 (97.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High1 (3.0%)
Unknown32 (97.0%)
User Interaction
None1 (3.0%)
Unknown32 (97.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (3.0%)
Unknown32 (97.0%)
Top CVEs
Signals from CVEs in this product scope (33 CVEs).
33 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2004-1666HIGH Buffer overflow in the MSN module in Trillian 0.74i allows remote MSN servers to execute arbitrary code via a long string that ends in a newline character. | Dec 31, 2004 | 7.5 | 39 | NO | YES |
CVE-2007-3832HIGH Buffer overflow in the AOL Instant Messenger (AIM) protocol handler in AIM.DLL in Cerulean Studios Trillian allows remote attackers to execute arbitrary code via a malformed aim: U | Jul 17, 2007 | 9.3 | 38 | NO | YES |
CVE-2008-6563HIGH Buffer overflow in the XML parser in Trillian 3.1.9.0, and possibly earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a | Mar 31, 2009 | 9.3 | 35 | NO | YES |
CVE-2002-1486HIGH Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service and possibly execute arbitrary code via (1 | Apr 2, 2003 | 7.5 | 32 | NO | YES |
CVE-2008-2008HIGH Buffer overflow in the Display Names message feature in Cerulean Studios Trillian Basic and Pro 3.1.9.0 allows remote attackers to cause a denial of service (crash) or execute arbi | Apr 29, 2008 | 9.3 | 31 | NO | NO |
CVE-2005-0633HIGH Buffer overflow in Trillian 3.0 and Pro 3.0 allows remote attackers to execute arbitrary code via a crafted PNG image file. | Mar 2, 2005 | 7.5 | 30 | NO | YES |
CVE-2002-1487MEDIUM The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) by sending the raw messages (1) 206, (2) 211, (3) 213, (4) 214, | Apr 2, 2003 | 5.0 | 28 | NO | YES |
CVE-2008-5403HIGH Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XML tag. | Dec 10, 2008 | 10.0 | 27 | NO | NO |
CVE-2008-5402HIGH Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID." | Dec 10, 2008 | 10.0 | 27 | NO | NO |
CVE-2008-5401HIGH Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image filename, related to | Dec 10, 2008 | 10.0 | 27 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (33 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
8 CVEs
24.2% of CVEs· 87th percentile
Social Chatter
Signals from CVEs in this product scope (33 CVEs).
Media Mentions
Signals from CVEs in this product scope (33 CVEs).
Top CNAs Publishing CVEs For Trillian
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 5.1.0.19 | 1 | 5.8 | 1.1% | 0 | 0 |
| 3.1.9.0 | 9 | 9.8 | 6.8% | 0 | 1 |
| 3.1.8.0 | 3 | 10.0 | 7.6% | 0 | 0 |
| 3.1.7.0 | 4 | 9.8 | 7.3% | 0 | 0 |
| 3.1.6.0 | 6 | 8.9 | 7.2% | 0 | 1 |
| 3.1.5.1 | 4 | 9.8 | 7.3% | 0 | 0 |
| 3.1.5.0 | 4 | 9.8 | 7.3% | 0 | 0 |
| 3.1.11.0 | 2 | 10.0 | 7.5% | 0 | 0 |
| 3.1.10.0 | 3 | 10.0 | 7.6% | 0 | 0 |
| 3.1.0.9 | 3 | 10.0 | 7.6% | 0 | 0 |
| 3.1.0.121 | 3 | 10.0 | 7.6% | 0 | 0 |
| 3.1.0.120 | 4 | 8.8 | 6.0% | 0 | 0 |
| 3.1 | 7 | 8.7 | 5.9% | 0 | 0 |
| 3.0 | 7 | 9.0 | 6.4% | 0 | 1 |
| 2.1 | 4 | 9.8 | 7.3% | 0 | 0 |
| 2.0 | 6 | 8.8 | 6.1% | 0 | 0 |
| 1.0 | 4 | 9.3 | 6.7% | 0 | 0 |
| 0.74i | 5 | 9.4 | 7.8% | 0 | 1 |
| 0.74g | 4 | 9.4 | 6.7% | 0 | 0 |
| 0.74f | 4 | 9.4 | 6.7% | 0 | 0 |