Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."
2008-12-10T06:44:41.940
2025-04-09T00:30:58.490
Deferred
CVSSv2: 10.0 (HIGH)
AV:N/AC:L/Au:N/C:C/I:C/A:C
10.0
10.0
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | cerulean_studios | trillian | 0.50 | Yes |
| Application | cerulean_studios | trillian | 0.52 | Yes |
| Application | cerulean_studios | trillian | 0.60 | Yes |
| Application | cerulean_studios | trillian | 0.61 | Yes |
| Application | cerulean_studios | trillian | 0.62 | Yes |
| Application | cerulean_studios | trillian | 0.63 | Yes |
| Application | cerulean_studios | trillian | 0.70 | Yes |
| Application | cerulean_studios | trillian | 0.71 | Yes |
| Application | cerulean_studios | trillian | 0.72 | Yes |
| Application | cerulean_studios | trillian | 0.73 | Yes |
| Application | cerulean_studios | trillian | 0.74 | Yes |
| Application | cerulean_studios | trillian | 0.74c | Yes |
| Application | cerulean_studios | trillian | 0.74d | Yes |
| Application | cerulean_studios | trillian | 0.74e | Yes |
| Application | cerulean_studios | trillian | 0.74f | Yes |
| Application | cerulean_studios | trillian | 0.74g | Yes |
| Application | cerulean_studios | trillian | 0.74i | Yes |
| Application | cerulean_studios | trillian | 0.635 | Yes |
| Application | cerulean_studios | trillian | 0.725 | Yes |
| Application | cerulean_studios | trillian | 0.6351 | Yes |
| Application | cerulean_studios | trillian | 1.0 | Yes |
| Application | cerulean_studios | trillian | 1.0 | Yes |
| Application | cerulean_studios | trillian | 2.0 | Yes |
| Application | cerulean_studios | trillian | 2.0 | Yes |
| Application | cerulean_studios | trillian | 2.1 | Yes |
| Application | cerulean_studios | trillian | 3.0 | Yes |
| Application | cerulean_studios | trillian | 3.0 | Yes |
| Application | cerulean_studios | trillian | 3.0 | Yes |
| Application | cerulean_studios | trillian | 3.1 | Yes |
| Application | cerulean_studios | trillian | 3.1 | Yes |
| Application | cerulean_studios | trillian | 3.1 | Yes |
| Application | cerulean_studios | trillian | 3.1.0.120 | Yes |
| Application | cerulean_studios | trillian | 3.1.0.121 | Yes |
| Application | cerulean_studios | trillian | 3.1.5.0 | Yes |
| Application | cerulean_studios | trillian | 3.1.5.1 | Yes |
| Application | cerulean_studios | trillian | 3.1.6.0 | Yes |
| Application | cerulean_studios | trillian | 3.1.7.0 | Yes |
| Application | cerulean_studios | trillian | 3.1.8.0 | Yes |
| Application | cerulean_studios | trillian | 3.1.9.0 | Yes |
| Application | cerulean_studios | trillian | 3.1.9.0 | Yes |
| Application | cerulean_studios | trillian | 3.1.9.0 | Yes |
| Application | cerulean_studios | trillian | 3.1.10.0 | Yes |
| Application | cerulean_studios | trillian | 3.1.11.0 | Yes |
| Application | cerulean_studios | trillian_pro | * | Yes |
| Application | cerulean_studios | trillian_pro | 1.0 | Yes |
| Application | cerulean_studios | trillian_pro | 2.0 | Yes |
| Application | cerulean_studios | trillian_pro | 2.01 | Yes |
| Application | cerulean_studios | trillian_pro | 3.0 | Yes |
| Application | cerulean_studios | trillian_pro | 3.1.5.0 | Yes |
| Application | cerulean_studios | trillian_pro | 3.1_build_121 | Yes |
| Application | ceruleanstudios | trillian | * | Yes |
| Application | ceruleanstudios | trillian | 3.1.0.9 | Yes |
| Application | ceruleanstudios | trillian | 3.1.9.0 | Yes |
| Application | ceruleanstudios | trillian_pro | * | Yes |
| Application | ceruleanstudios | trillian_pro | 3.1.9.0 | Yes |