CVE-2002-1487: Medium severity Cerulean Studios Trillian vulnerability

Published Mar 18, 2003

Updated

The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) by sending the raw messages (1) 206, (2) 211, (3) 213, (4) 214, (5) 215, (6) 217, (7) 218, (8) 243, (9) 302, (10) 317, (11) 324, (12) 332, (13) 333, (14) 352, and (15) 367.

Affected Software

1 affected component

Cerulean Studios Trillian=0.74

Remediation

Patch Available

http://www.securityfocus.com/bid/5775

Event History

Mar 18, 2003

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1487?

CVE-2002-1487 is classified as a denial of service vulnerability, potentially causing crashes in Trillian versions 0.73 and 0.74.

How do I fix CVE-2002-1487?

To mitigate CVE-2002-1487, upgrade to a version of Trillian that is not vulnerable, as the issue was resolved in later releases.

Which versions of Trillian are affected by CVE-2002-1487?

CVE-2002-1487 affects Trillian versions 0.73 and 0.74.

What can an attacker do with CVE-2002-1487?

An attacker can exploit CVE-2002-1487 to send specific raw messages from malicious IRC servers, resulting in a denial of service.

Is CVE-2002-1487 still a threat today?

CVE-2002-1487 is largely considered a historical threat as it pertains to older versions of Trillian, which are no longer widely used.