CVE-2002-1487: The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of servic...

Security readout for executives and security teams

CVE-2002-1487 is an old denial-of-service issue in Trillian's IRC component. If a user connects Trillian 0.73 or 0.74 to a malicious IRC server, the server can crash the client. The evidence points to application disruption, not data theft or system compromise. Exposure is likely limited to environments still running Trillian 0.73 or 0.74 with IRC enabled and able to connect to untrusted or attacker-controlled IRC servers. Modern environments are unlikely to be exposed unless legacy clients remain in use. Treat this as a legacy hygiene issue, not an emergency, unless the business still depends on affected Trillian IRC clients. Priority should be asset discovery and retirement of obsolete software that can be crashed remotely. Mitigation focus: Inventory systems for Trillian 0.73 or 0.74 installations.; Retire or replace unsupported Trillian versions where found.; Restrict legacy clients from connecting to untrusted IRC servers..

Prepared

Jul 1, 2026, 02:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.