180 matches found
CVE-2003-1512
Buffer overflow in mIRC 6.1 and 6.11 allows remote attackers to cause a denial of service crash via a long DCC SEND request...
CVE-2003-1508
Buffer overflow in mIRC 6.12, when the DCC get dialog window has been minimized and the user opens the minimized window, allows remote attackers to cause a denial of service crash via a long filename...
CVE-2003-1512
CVE-2003-1512 describes a buffer overflow in mIRC versions 6.1 and 6.11 that allows remote attackers to cause a denial of service (crash) via a long DCC SEND request. Connected Red Hat advisory corroborates the vulnerability description. The provided documents do not include exploitation details,...
CVE-2003-1508
CVE-2003-1508 affects mIRC 6.12. A buffer overflow occurs in the DCC get dialog: if the window is minimized and a long filename is opened, it may crash the application, enabling a remote denial-of-service. The available sources (NVD, CVE List) reiterate the same description without providing expl...
Design/Logic Flaw
The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox, Adobe...
CVE-2007-3896
The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox, Adobe...
CVE-2007-3896
CVE-2007-3896 affects Windows Shell32 (Windows XP/Server 2003 with IE7) where URL handling in the shell misparses invalid % sequences in mailto: or other URI handlers, allowing remote code execution. The issue can be triggered by launching external programs via URI handlers invoked by application...
Microsoft Windows - URI Handler Command Execution
Microsoft Windows - URI Handler Command Execution source: https://www.securityfocus.com/bid/25945/info Microsoft Windows XP and Server 2003 with Internet Explorer 7 is prone to a command-execution vulnerability because it fails to properly sanitize input. Successfully exploiting this issue allows...
Microsoft Windows - URI Handler Command Execution
source: https://www.securityfocus.com/bid/25945/info Microsoft Windows XP and Server 2003 with Internet Explorer 7 is prone to a command-execution vulnerability because it fails to properly sanitize input. Successfully exploiting this issue allows remote attackers to execute arbitrary commands in...
0day: mIRC pwns Windows
Yipiya Ypipiya yah yeah. Here is a 0day! hurra mIRC pwns your Windozes! ref. pdp send this to a user and make him double click on it masquerade it with pink fore/background color and say 'free pr0n click here -' it works all the time! damned perverts:...
mIRC unfiltered shell characters vulnerability
Shell characters are not filtered on invoking external URL handler, making it's possible to use URLs like mailto:xx../../../../../../../../../../../windows/system32/calc.exe".bat...
CVE-2003-1336
CVE-2003-1336 describes a stack-buffer overflow in mIRC triggered by a long irc:// URL, allowing remote code execution in versions before 6.11. Public exploit modules exist (e.g., Metasploit, Exploit-DB) demonstrating exploitability. Remediation: upgrade to mIRC 6.11 or later.
CVE-2003-1336
Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL...
Code injection
The mIRC Control Plug-in for Winamp allows user-assisted remote attackers to execute arbitrary code via the '|' pipe shell metacharacter in the name of the song in a .mp3 file...
CVE-2007-4402
Multiple unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary code via the '|' pipe shell metacharacter in the name of the song in a .mp3 file...
Crlf injection
Multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin and possibly other unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...
Code injection
Multiple unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary code via the '|' pipe shell metacharacter in the name of the song in a .mp3 file...
CVE-2007-4401
Multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin and possibly other unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...