Trillian Pro

Vendor:

First CVE: Dec 31, 2002 · Active for 23 years

11

Total CVEs

More Total CVEs than 89% of tracked products

2.2

Avg CVEs / Year

Higher CVE frequency than 63% of tracked products

8.5

Avg CVSS

Higher Avg CVSS than 76% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Trillian Pro over time

Volume of CVEsAvg CVSS Base Score

First CVE

Dec 31, 2002

23 years ago

Most Recent CVE

Dec 10, 2008

6,439 days ago

CVE Severity & Scoring

Trillian Pro11 CVEs

9%

91%

All CVEs353,173 CVEs

45%

40%

11%

LowHigh

Attack Vector

Local0 (0.0%)

Network0 (0.0%)

Unknown11 (100.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low0 (0.0%)

High0 (0.0%)

Unknown11 (100.0%)

User Interaction

None0 (0.0%)

Unknown11 (100.0%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None0 (0.0%)

Unknown11 (100.0%)

Top CVEs

Signals from CVEs in this product scope (11 CVEs).

11 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2005-0633HIGH Buffer overflow in Trillian 3.0 and Pro 3.0 allows remote attackers to execute arbitrary code via a crafted PNG image file.	Mar 2, 2005	7.5	30	NO	YES
CVE-2008-5403HIGH Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XML tag.	Dec 10, 2008	10.0	27	NO	NO
CVE-2008-5402HIGH Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."	Dec 10, 2008	10.0	27	NO	NO
CVE-2008-5401HIGH Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image filename, related to	Dec 10, 2008	10.0	27	NO	NO
CVE-2007-2418HIGH Heap-based buffer overflow in the Rendezvous / Extensible Messaging and Presence Protocol (XMPP) component (plugins\rendezvous.dll) for Cerulean Studios Trillian Pro before 3.1.5.1	May 2, 2007	10.0	27	NO	NO
CVE-2002-2390HIGH Buffer overflow in the IDENT daemon (identd) in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers to cause a denial of service (crash) and possibly execute arb	Dec 31, 2002	10.0	26	NO	NO
CVE-2008-2408HIGH Heap-based buffer overflow in the XML parsing functionality in talk.dll in Cerulean Studios Trillian Pro before 3.1.10.0 allows remote attackers to execute arbitrary code via a mal	May 23, 2008	9.3	25	NO	NO
CVE-2007-2478HIGH Multiple heap-based buffer overflows in the IRC component in Cerulean Studios Trillian Pro before 3.1.5.1 allow remote attackers to corrupt memory and possibly execute arbitrary co	May 3, 2007	9.3	25	NO	NO
CVE-2004-2370HIGH Stack-based buffer overflow in Trillian 0.71 through 0.74f and Trillian Pro 1.0 through 2.01 allows remote attackers to execute arbitrary code via a Yahoo Messenger packet with a l	Dec 31, 2004	7.5	25	NO	NO
CVE-2004-2304HIGH Integer overflow in Trillian 0.74 and earlier, and Trillian Pro 2.01 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a dir	Dec 31, 2004	7.5	20	NO	NO

View all 11 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (11 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

1 CVE

9.1% of CVEs· 86th percentile

Social Chatter

Signals from CVEs in this product scope (11 CVEs).

Media Mentions

Signals from CVEs in this product scope (11 CVEs).

Top CNAs Publishing CVEs For Trillian Pro

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
3.1_build_121	4	8.0	5.8%	0
3.1.9.0	3	10.0	7.6%	0
3.1.5.0	3	10.0	7.6%	0
3.0	4	9.4	7.1%	1
2.01	5	9.0	6.1%	0
2.0	5	9.0	6.1%	0
1.0	6	9.2	6.0%	0