PatchTheCVE: trillianhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2012-5824: Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's Common Name https://patchthecve.com/cve/CVE-2012-5824.htmlhttps://patchthecve.com/cve/CVE-2012-5824.htmlTue, 16 Jun 2026 23:47:24 +0000MEDIUM 5.8: Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, a different vulnerability than CVE-20CVE-2009-4831: Cerulean Studios Trillian 3.1 Basic does not check SSL certificates during MSN authentication, which allows rehttps://patchthecve.com/cve/CVE-2009-4831.htmlhttps://patchthecve.com/cve/CVE-2009-4831.htmlTue, 16 Jun 2026 23:14:26 +0000MEDIUM 5.8: Cerulean Studios Trillian 3.1 Basic does not check SSL certificates during MSN authentication, which allows remote attackers to obtain MSN credentials via a man-in-the-middle attack with a spoofed SSL certificate.CVE-2008-6563: Buffer overflow in the XML parser in Trillian 3.1.9.0, and possibly earlier, allows remote attackers to cause https://patchthecve.com/cve/CVE-2008-6563.htmlhttps://patchthecve.com/cve/CVE-2008-6563.htmlTue, 16 Jun 2026 23:02:27 +0000HIGH 9.3: Buffer overflow in the XML parser in Trillian 3.1.9.0, and possibly earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DTD file.CVE-2008-5403: Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attachttps://patchthecve.com/cve/CVE-2008-5403.htmlhttps://patchthecve.com/cve/CVE-2008-5403.htmlTue, 16 Jun 2026 22:59:54 +0000HIGH 10.0: Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XML tag.CVE-2008-5402: Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbhttps://patchthecve.com/cve/CVE-2008-5402.htmlhttps://patchthecve.com/cve/CVE-2008-5402.htmlTue, 16 Jun 2026 22:59:54 +0000HIGH 10.0: Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the "IMG SRC ID."CVE-2008-5401: Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attahttps://patchthecve.com/cve/CVE-2008-5401.htmlhttps://patchthecve.com/cve/CVE-2008-5401.htmlTue, 16 Jun 2026 22:59:54 +0000HIGH 10.0: Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image filename, related to "AIM IMG Tag Parsing."