Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string specifiers in the name.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Trillian | Cerulean_studios | 0.73 (including) | 0.73 (including) |
| Trillian | Cerulean_studios | 0.725 (including) | 0.725 (including) |