KezNews.com
DownloadsOther NewsForumBlogsWallpapersJokewareSearch

News letter:


Enter Your E-mail:


Search in KezNews.com:







Trillian 3.1.11.0

Trillian is a multi-network chat client that currently supports IRC, AIM, ICQ, MSN, and Yahoo! Messenger.
download - comments - 4.10.2008

Trillian Issues Security Update

Trillian developer Cerulean released an update Monday to address issues within the instant messaging product, including a buffer overflow vulnerability that could give an attacker control of a user's computer...
betanews.com - 20.06.2007

Trillian Set To Release Mac Client

Cerulean Studios said Friday that it was in the process of developing a version of its client for the Mac, encroaching on territory long occupied by competitor Adium...
betanews.com - 08.10.2007

Text bug blights Trillian

Users of the popular Trillian instant messaging client need to update their software following the discovery of a serious security bug. The multi-protocol chat application from Cerulean Studios is subject to a heap overflow vulnerability because of programming errors involving the word-wrapping of UTF-8 text.

As a result, hackers might be able to crash versions of the application, thereby loading exploit code onto vulnerable systems. Viewing a malicious message containing a specially malformed UTF-8 string would be enough to trigger the attack. "The MSN protocol is a known attack vector for this vulnerability. However, exploitation could potentially occur using any supported protocol," an advisory by iDefense warns.


neowin.net - 19.06.2007

Cross-browser Firefox/IE flaw worsens

The browser flaw which allows attackers to hijack a computer by using Internet Explorer to launch Firefox is affecting other applications as well. Security researchers Nate McFeters, Billy Rios and Raghav Dube have disclosed information and working exploit code for a similar vulnerability in Trillian. Like the Firefox attack, the Trillian exploit uses a Uniform Resource Identifier (URI) function as the point of attack.

The URI allows the browser to launch a third-party application on the user's system in much the same way that a URL is used to access a web page. When the user visits a specially-crafted page, the application is launched and attack code is run to crash the application and execute code. The attack could be used to remotely install malware on a user's system.


neowin.net - 17.07.2007

Zero-day security flaw leaves FireFox wide open

Security researchers have disclosed a zero-day vulnerability in the latest version of Firefox that give miscreants complete control of Windows-based computers when the Mozilla browser visits a booby-trapped website.

The vulnerability resides in the way Firefox handles uniform resource identifiers, or URIs, the protocols that allow the browser to access software and other resources located on a PC. The browser fails to properly vet at least five different URIs, a flaw that could allow an attacker to install malware on a PC simply by convincing a victim to click on a doctored link.

Over the past few months, URIs have emerged as one of the weaker links in the online security chain. Last week, Mozilla patched Firefox to fix another critical flaw related to URI handling. Internet Explorer and the Trillian instant messaging program have also fallen victim to the often overlooked protocol...
winbeta.org - 26.07.2007



for more results
try search in KezNews.com by google: trillian 3.1



TIP:   Search in our forum