CVE-2008-2008: Cerulean Studios Trillian

High severity, CVSS 9.3. EPSS: 4.1% chance of exploitation in the next 30 days.

Buffer overflow in the Display Names message feature in Cerulean Studios Trillian Basic and Pro 3.1.9.0 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long nickname in an MSN protocol message.

Affected products

• Cerulean Studios Trillian: version 3.1.9.0 only

Published 2008-04-29. Last modified 2026-06-16.