EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Epic4 | Epic | pre2.002 (including) | pre2.002 (including) |
Epic4 | Epic | pre2.003 (including) | pre2.003 (including) |
Red Hat Linux 7.3 | RedHat | * | |
Red Hat Linux 8.0 | RedHat | * | |
Red Hat Linux 9 | RedHat | * |