CVE-2019-6453

mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling (Chrome is not exploitable).

CVE-2003-1336

Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.

CVE-2011-5282

mIRC prior to 7.22 has a message leak because chopping of outbound messages is mishandled.

CVE-2008-7314

mIRC before 6.35 allows attackers to cause a denial of service (crash) via a long nickname.