$ cve CVE-2002-1486 JSON

CVE-2002-1486 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 9.4% (pctl 95)

Patch early

A public exploit exists.

Description

Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service and possibly execute arbitrary code via (1) a large response from the server, (2) a JOIN with a long channel name, (3) a long "raw 221" message, (4) a PRIVMSG with a long nickname, or (5) a long response from an IDENT server.

Scoring

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	9.36% — more likely to be exploited than 95% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2003-04-02
Last modified	2026-06-16

Affected (1)

Vendor	Product
cerulean studios	trillian

Public exploits

Source	Title	Date
exploit-db	Trillian 0.74 - IRC Oversized Data Block Buffer Overflow	2002-09-22
exploit-db	Trillian 0.725/0.73/0.74 - IRC User Mode Numeric Remote Buffer Overflow	2002-09-21
exploit-db	Trillian 0.73/0.74 - IRC JOIN Buffer Overflow	2002-09-20
exploit-db	Trillian 0.73/0.74 - IRC PRIVMSG Buffer Overflow	2002-09-19
exploit-db	Trillian 0.6351/0.7x - Identd Buffer Overflow	2002-09-18

References

→ the Explorer · watch your stack · NVD