Path: news.netfront.net!news.glorb.com!diablo.efnet.com! efnet.com!ctu-peer!news.nctu.edu.tw!news.NHCUE.edu.tw!Leo.mi.chu .edu.tw!zoonews.ee.ntu.edu.tw!FreeBSD.csie.NCTU.ed u.tw!not-for-mail
From: david130490@hotmail.com
Newsgroups: mailing.unix.bugtraq
Subject: Trillian 3.1.9.0 DTD File Buffer Overflow
Date: Sat, 12 Apr 2008 03:53:32 +0800 (CST)
Organization: NCTU CSIE FreeBSD Server
Lines: 22
Sender: nobody@FreeBSD.csie.nctu.edu.tw
Message-ID: <ftofjs$1afq$1@FreeBSD.csie.nctu.edu.tw>
NNTP-Posting-Host: freebsd.csie.nctu.edu.tw
X-Trace: FreeBSD.csie.nctu.edu.tw 1207943612 24303 140.113.17.209 (11 Apr 2008 19:53:32 GMT)
X-Complaints-To: usenet@FreeBSD.csie.nctu.edu.tw
NNTP-Posting-Date: Fri, 11 Apr 2008 19:53:32 +0000 (UTC)
Xref: news.netfront.net mailing.unix.bugtraq:26588

Name:
Trillian 3.1.9.0 DTD File Buffer Overflow


Software:
Trillian 3.1.9.0


Vendor:
Cerulean Studios


Description:
Trillian 3.1.9.0. Basic(and maybe minor versions and other as Pro) is vulnerable to parser xml format in .dtd file type. The explotation requires that the user download a malformed file and installed in a stixe directory and others. The bug is a function that parse .dtd files with SYSTEM and file identifier.


Web:
http://www.ceruleanstudios.com/


Download a poc file:
http://www.p1mp4m.es/index.php?act=a...ype=post&id=18