Vulnerability in Light

CVE-2002-0984

The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code.

EPSS: 0.037 (88.7th percentile) — read the EPSS interpretation.

Affected products

  • Light — versions 2.7.30p4, 2.8_pre9
  • N/a — versions n/a

References