CVE-2002-2155: Cerulean Studios Trillian

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string specifiers in the name.

Affected products

• Cerulean Studios Trillian: version 0.73 only; version 0.725 only

Published 2002-12-31. Last modified 2026-06-16.