CVE-2004-2370: Cerulean Studios Trillian

High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Trillian 0.71 through 0.74f and Trillian Pro 1.0 through 2.01 allows remote attackers to execute arbitrary code via a Yahoo Messenger packet with a long key name.

Affected products

• Cerulean Studios Trillian: version 0.71 only; version 0.73 only; version 0.74 only; version 0.74b only; version 0.74c only; version 0.74d only; …
• Cerulean Studios Trillian Pro: version 1.0 only; version 2.0 only; version 2.01 only

Published 2004-12-31. Last modified 2026-06-16.