mIRC <= 6.34 PRIVMSG Handling Stack Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ class Metasploit3 'mIRC %q This module exploits a...

mIRC PRIVMSG Handling Stack Buffer Overflow

This module exploits a buffer overflow in the mIRC IRC Client v6.34 and earlier. By enticing a mIRC user to connect to this server module, an excessively long PRIVMSG command can be sent, overwriting the stack. Due to size restrictions, ordinal payloads may be necessary. This module is based on t...

CVE-2008-4449

This CVE (CVE-2008-4449) affects mIRC version 6.34 and earlier, where processing a PRIVMSG with a long hostname can cause a stack-based buffer overflow. The underlying issue is improper input validation in PRIVMSG handling, enabling a remote attacker to potentially execute arbitrary code on the a...

CVE-2008-4449

creationtimestamp| type| source ---|---|--- 2008-10-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6654 2008-10-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6666 2010-06-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16422 2018-05-29...

mIRC PRIVMSG hostname buffer overflow

Added: 03/13/2008 CVE: CVE-2008-4449 BID: 31552 OSVDB: 48752 Background mIRC is an Internet Relay Chat IRC client. Problem A buffer overflow in mIRC allows command execution when a user connects to a malicious IRC server which sends a PRIVMSG message with a long, specially crafted hostname...

mIRC PRIVMSG hostname buffer overflow

Added: 03/13/2008 CVE: CVE-2008-4449 BID: 31552 OSVDB: 48752 Background mIRC is an Internet Relay Chat IRC client. Problem A buffer overflow in mIRC allows command execution when a user connects to a malicious IRC server which sends a PRIVMSG message with a long, specially crafted hostname...