mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling (Chrome is not exploitable).
Max CVSS
8.1
EPSS Score
68.48%
Published
2019-02-18
Updated
2020-08-24
mIRC prior to 7.22 has a message leak because chopping of outbound messages is mishandled.
Max CVSS
5.3
EPSS Score
0.08%
Published
2020-01-21
Updated
2020-01-29
mIRC before 6.35 allows attackers to cause a denial of service (crash) via a long nickname.
Max CVSS
7.5
EPSS Score
0.12%
Published
2020-01-23
Updated
2020-01-27
CVE-2008-4449
Public exploit
Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIVMSG message.
Max CVSS
9.3
EPSS Score
84.48%
Published
2008-10-06
Updated
2017-09-29
Multiple unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary code via the '|' (pipe) shell metacharacter in the name of the song in a .mp3 file.
Max CVSS
6.8
EPSS Score
11.87%
Published
2007-08-18
Updated
2018-10-15
Buffer overflow in mIRC 6.12, when the DCC get dialog window has been minimized and the user opens the minimized window, allows remote attackers to cause a denial of service (crash) via a long filename.
Max CVSS
4.3
EPSS Score
0.86%
Published
2003-12-31
Updated
2008-09-05
CVE-2003-1336
Public exploit
Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.
Max CVSS
9.3
EPSS Score
80.53%
Published
2003-12-31
Updated
2017-07-29
7 vulnerabilities found