Mirc : Security Vulnerabilities
mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling (Chrome is not exploitable).
| Max Base Score | 8.1 |
| Published | 2019-02-18 |
| Updated | 2020-08-24 |
| EPSS | 68.93% |
mIRC prior to 7.22 has a message leak because chopping of outbound messages is mishandled.
| Max Base Score | 5.3 |
| Published | 2020-01-21 |
| Updated | 2020-01-29 |
| EPSS | 0.08% |
mIRC before 6.35 allows attackers to cause a denial of service (crash) via a long nickname.
| Max Base Score | 7.5 |
| Published | 2020-01-23 |
| Updated | 2020-01-27 |
| EPSS | 0.12% |
CVE-2008-4449
Public exploit exists
Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIVMSG message.
| Max Base Score | 9.3 |
| Published | 2008-10-06 |
| Updated | 2017-09-29 |
| EPSS | 89.63% |
The mIRC Control Plug-in for Winamp allows user-assisted remote attackers to execute arbitrary code via the '|' (pipe) shell metacharacter in the name of the song in a .mp3 file.
| Max Base Score | 6.8 |
| Published | 2007-08-18 |
| Updated | 2018-10-15 |
| EPSS | 2.17% |
Multiple unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary code via the '|' (pipe) shell metacharacter in the name of the song in a .mp3 file.
| Max Base Score | 6.8 |
| Published | 2007-08-18 |
| Updated | 2018-10-15 |
| EPSS | 11.11% |
Multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin and possibly other unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
| Max Base Score | 6.8 |
| Published | 2007-08-18 |
| Updated | 2018-10-15 |
| EPSS | 2.08% |
Buffer overflow in mIRC 6.12, when the DCC get dialog window has been minimized and the user opens the minimized window, allows remote attackers to cause a denial of service (crash) via a long filename.
| Max Base Score | 4.3 |
| Published | 2003-12-31 |
| Updated | 2008-09-05 |
| EPSS | 0.86% |
CVE-2003-1336
Public exploit exists
Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.
| Max Base Score | 9.3 |
| Published | 2003-12-31 |
| Updated | 2017-07-29 |
| EPSS | 80.88% |
9 vulnerabilities found