Update Protection against mIRC PRIVMSG Message Processing Buffer Overflow

A buffer overflow vulnerability was reported in mIRC, a popular IRC client for Microsoft Windows. Internet Relay Chat IRC is a form of instant messaging over the Internet, mainly designed for group communication in discussion forums. Remote attackers could exploit this vulnerability by tricking a...

mIRC PRIVMSG Handling Remote Buffer Overflow

The version of mIRC installed on the remote host is earlier than 6.35 and thus reportedly prone to a buffer overflow attack that can be triggered by a long hostname in a PRIVMSG message. If an attacker can trick a user into connecting to a malicious IRC server perhaps via JavaScript in an HTML...

mIRC Detection

mIRC, a popular Internet Relay Chat IRC client, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34470; scriptversion"1.16"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"mIRC Detection";...

CVE-2008-4449

Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIVMSG message...

Stack overflow

Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIVMSG message...

CVE-2008-4449

This CVE (CVE-2008-4449) affects mIRC version 6.34 and earlier, where processing a PRIVMSG with a long hostname can cause a stack-based buffer overflow. The underlying issue is improper input validation in PRIVMSG handling, enabling a remote attacker to potentially execute arbitrary code on the a...

CVE-2008-4449

Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIVMSG message...

mirc634-overflow.txt

!/usr/bin/perl mIRC 6.34 Remote Buffer Overflow Exploit Exploit by SkD skdrat hotmail com ---------------------------------------- A day's work of debugging and looking at mIRC. Tested on Windows XP SP3 English and Windows Vista SP0. Credits to securfrog for publishing the PoC. Author has no...

mIRC 6.34 Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl mIRC 6.34 Remote Buffer Overflow Exploit Exploit by SkD skdrat at hotmail . com ---------------------------------------- A day's work of debugging and looking at mIRC. Tested on Windows XP SP3 English and Windows Vista SP0. Credits to securfrog fo...

mIRC 6.34 - Remote Buffer Overflow

mIRC 6.34 - Remote Buffer Overflow !/usr/bin/perl mIRC 6.34 Remote Buffer Overflow Exploit Exploit by SkD skdrat hotmail com ---------------------------------------- A day's work of debugging and looking at mIRC. Tested on Windows XP SP3 English and Windows Vista SP0. Credits to securfrog for...

mIRC 6.34 - Remote Buffer Overflow

!/usr/bin/perl mIRC 6.34 Remote Buffer Overflow Exploit Exploit by SkD skdrat hotmail com ---------------------------------------- A day's work of debugging and looking at mIRC. Tested on Windows XP SP3 English and Windows Vista SP0. Credits to securfrog for publishing the PoC. Author has no...

mirc-overflow.txt

Mirc 6.34 Remote Buffer Overflow This poc allow you to own the 2 first EDI & EDX bytes. To become remote, add a simple document.location.href=irc://server.com/... in some html page use IO::Socket; sub sock my $sock=new IO::Socket::INET Listen = 1, LocalAddr = 'localhost', LocalPort = 6667, Proto ...

mIRC 6.34 Remote Buffer Overflow PoC

No description provided by source. Mirc 6.34 Remote Buffer Overflow This poc allow you to own the 2 first EDI & EDX bytes. To become remote, add a simple document.location.href=irc://server.com/... in some html page use IO::Socket; sub sock my $sock=new IO::Socket::INET Listen = 1, LocalAddr =...

mIRC 6.34 Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ==================================== mIRC 6.34 Remote Buffer Overflow PoC ==================================== Mirc 6.34 Remote Buffer Overflow This poc allow you to own the 2 first EDI & EDX bytes. To become remote, add a simple...

mIRC 6.34 - Remote Buffer Overflow (PoC)

Mirc 6.34 Remote Buffer Overflow This poc allow you to own the 2 first EDI & EDX bytes. To become remote, add a simple document.location.href=irc://server.com/... in some html page use IO::Socket; sub sock my $sock=new IO::Socket::INET Listen = 1, LocalAddr = 'localhost', LocalPort = 6667, Proto ...

chilkat-execdos.txt

Chilkat IMAP ActiveX File Execution&IE DoS www.chilkasoft.com By: e.wiZz! Info: Bosnian Idiot FTW! Site: infected.blogger.ba Greetz: suN8Hclf,Luigi and peoples from hakin9 forum In the wild... File: ChilkatMailv79.dll ProgID: ChilkatMail2.ChilkatMailMan2.1 CLSID:...

mIRC PRIVMSG hostname buffer overflow

Added: 03/13/2008 CVE: CVE-2008-4449 BID: 31552 OSVDB: 48752 Background mIRC is an Internet Relay Chat IRC client. Problem A buffer overflow in mIRC allows command execution when a user connects to a malicious IRC server which sends a PRIVMSG message with a long, specially crafted hostname...

mIRC PRIVMSG hostname buffer overflow

Added: 03/13/2008 CVE: CVE-2008-4449 BID: 31552 OSVDB: 48752 Background mIRC is an Internet Relay Chat IRC client. Problem A buffer overflow in mIRC allows command execution when a user connects to a malicious IRC server which sends a PRIVMSG message with a long, specially crafted hostname...

mIRC PRIVMSG hostname buffer overflow

Added: 03/13/2008 CVE: CVE-2008-4449 BID: 31552 OSVDB: 48752 Background mIRC is an Internet Relay Chat IRC client. Problem A buffer overflow in mIRC allows command execution when a user connects to a malicious IRC server which sends a PRIVMSG message with a long, specially crafted hostname...

VulnCheck KEV: CVE-2007-3896

The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox,...