What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Discussion

Trillian advisories/updates

2 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Post #1 last edited
FYI…

- http://secunia.com/advisories/25086/
Release Date: 2007-05-01
Critical: Highly critical
Impact: Exposure of sensitive information, System access
Where: From remote
Solution Status: Vendor Patch
Software: Trillian Basic 3.x, Trillian Pro 3.x …
The vulnerabilities are reported in 3.1. Other versions may also be affected.
Solution: Update to version 3.5.1.0.
http://www.ceruleanstudios.com/downloads/ …"

.
Post #2
FYI…

- http://blog.ceruleanstudios.com/?p=150
June 18, 2007 ~ "iDefense Labs has notified us of a security vulnerability in Trillian 3.x, and we worked last week to resolve it and issue a patch. Details will shortly be live at the following url: http://labs.idefense.com/intelligence/vuln…play.php?id=545 . You’ll find the latest full version available here*, and existing customers should be receiving an auto-update notification upon their next restart of Trillian. We recommend all users upgrade to the latest version."
* http://cerulean.cachenetworks.com/trillian-v3.1.6.0.exe

- http://en.wikipedia.org/wiki/Trillian_%28software%29
"Trillian is a proprietary multiprotocol instant messaging application for Windows created by Cerulean Studios that can connect to multiple IM services, such as AIM, ICQ, Windows Live Messenger, Yahoo! Messenger, IRC, Novell GroupWise Messenger, Bonjour, Jabber, and Skype networks (the latter four with Trillian Pro which allows for additional plugins)…"


:ph34r:
Post #3
FYI…

Trillian 3.1.7.0
- http://blog.ceruleanstudios.com/?cat=7
July 20, 2007 - "In response to the URI security vulnerability released this week, we have updated Trillian 3 to [removed]. Auto-update should be firing for existing users, and you can use our download page* to grab a full installer if you are so inclined. We recommend that all existing Trillian 3.x customers download this latest upgrade…"
* http://www.ceruleanstudios.com/downloads/


;)
Post #4
FYI…

Trillian multiple vulns - update available
- http://secunia.com/advisories/30336/
Release Date: 2008-05-22
Critical: Highly critical
Impact: System access
Where: From remote
Solution Status: Vendor Patch
Software: Trillian Basic 3.x, Trillian Pro 3.x
…Successful exploitation allows execution of arbitrary code but requires that the user is tricked into opening a malicious image file…
Solution: Update to version 3.1.10.0.
http://www.ceruleanstudios.com/downloads/

.