Bug: Trillian 3.1 basic nick crash (WLB-2008050038 Ascii Version)

English Version
WLB2

CVE WLB2

 Topic: Trillian 3.1 basic nick crash
 Credit: Juan Pablo Lopez Yacubian
 Date: 2008.05.03
 CWE: CWE-119 (Show similar)
 CVE: CVE-2008-2008 (Show details)

Use CVE to see details like:
- CVSS2,
- Affected Software,
- References

Risk
Local
Remote
Low
Yes
Yes

I found a flaw in the trillian 3.1 for Windows.

It is that on receipt of a nickname too long with some characters, this leads to break the program, the failure of the
curious is that when the abri with ollydbg tries to read the argument of the message such as whether to wear the
nickname long special characters and message write many letters "A" is the result

Access violation when reading [41414141]

The test is made using an account of MSN Messenger and I got a nick there till the limit of characters to the next
character "‿" (without the quotes) and send a message to another account that had msn in trillian.

Anyway, is wrong with many more characters that is only one example ...

Greetings!

Juan Pablo Lopez Yacubian

[ ASCII VERSION ]

Copyright 2012, cxsecurity.com