• info
• discussion
• exploit
• solution
• references

mIRC 'PRIVMSG' Buffer Overflow Vulnerability

mIRC is prone to a stack-based buffer-overflow vulnerability.

An attacker can exploit this issue by enticing an unsuspecting user into connecting to a malicious IRC server. Successful attacks will allow arbitrary code to run within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

mIRC 6.34 is vulnerable; other versions may be affected as well.