CVE-2008-2409: Cerulean Studios Trillian

High severity, CVSS 9.3. EPSS: 6.1% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Cerulean Studios Trillian before 3.1.10.0 allows remote attackers to execute arbitrary code via unspecified attributes in the X-MMS-IM-FORMAT header in an MSN message.

Affected products

• Cerulean Studios Trillian: version 0.71 only; version 0.73 only; version 0.74 only; version 0.74i only; version 0.725 only; version 0.6351 only; …

Published 2008-05-23. Last modified 2026-06-16.