CVE-2003-0328

EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2003-06-09

Last modified

2024-08-08

Affected products

• Epic4 (Epic)

References

• http://www.debian.org/security/2003/dsa-306
• http://www.debian.org/security/2003/dsa-399
• http://www.redhat.com/support/errata/RHSA-2003-342.html