CVE-2007-3833: Cerulean Studios Trillian

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

The AOL Instant Messenger (AIM) protocol handler in Cerulean Studios Trillian allows remote attackers to create files with arbitrary contents via certain aim: URIs, as demonstrated by a URI that begins with the "aim: &c:\" substring and contains a full pathname in the ini field. NOTE: this can be leveraged for code execution by writing to a Startup folder.

Affected products

• Cerulean Studios Trillian: version 3.1.6.0 only

Published 2007-07-17. Last modified 2026-06-16.