CVE-2008-5402
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 7.0%
exploitation probability
7.0%top 6% of all CVEs
observed exploitation
nono source reports it
Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."
Affected products
n/a · n/aReferences
http://blog.ceruleanstudios.com/?p=404http://osvdb.org/50473http://secunia.com/advisories/33001http://securityreason.com/securityalert/4701https://exchange.xforce.ibmcloud.com/vulnerabilities/47098http://www.securityfocus.com/archive/1/498933/100/0/threadedhttp://www.securityfocus.com/bid/32645http://www.securitytracker.com/id?1021334http://www.vupen.com/english/advisories/2008/3348http://www.zerodayinitiative.com/advisories/ZDI-08-078