CVE-2002-1486 Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service and possibly execute arbitrary code via (1) a large response f...
HighCVSS 7.5
EPSS 9.4%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service and possibly execute arbitrary code via (1) a large response from the server, (2) a JOIN with a long channel name, (3) a long "raw 221" message, (4) a PRIVMSG with a long nickname, or (5) a long response from an IDENT server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cerulean studios trillian | = 0.73 | No fix listed |
| cerulean studios trillian | = 0.74 | No fix listed |
| cerulean studios trillian | = 0.725 | No fix listed |
References
- 20020920 Yet Another. Trillian 'JOIN' Overflow. exploit mailing-list patch vendor-advisory
- 20020921 And Again. Trillian 'raw 221' Overflow. mailing-list
- 20020922 *sigh* Trillian multiple DoS mailing-list
- 20020914 Trillian .74 and below, ident flaw. mailing-list
- 20020919 Trillian .73 & .74 "PRIVMSG" Overflow. mailing-list
- trillian-irc-join-bo(10150) vdb-entry
- trillian-raw221-bo(10151) vdb-entry vendor-advisory
- trillian-irc-server-bo(10163) vdb-entry vendor-advisory
- 5765 vdb-entry
- 5769 exploit vdb-entry vendor-advisory
- 5777 exploit patch vdb-entry vendor-advisory