mIRC before 6.35 allows attackers to cause a denial of service (crash) via a long nickname.
CVSS Score
7.5
EPSS Score
0.004
Published
2020-01-23
mIRC prior to 7.22 has a message leak because chopping of outbound messages is mishandled.
CVSS Score
5.3
EPSS Score
0.002
Published
2020-01-21
mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling (Chrome is not exploitable).
CVSS Score
8.1
EPSS Score
0.854
Published
2019-02-18
Buffer overflow in mIRC 6.12, when the DCC get dialog window has been minimized and the user opens the minimized window, allows remote attackers to cause a denial of service (crash) via a long filename.
CVSS Score
4.3
EPSS Score
0.008
Published
2003-12-31