mIRC

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

mIRC records in CISA KEV

No mIRC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mirc 7 records HIGH Advanced Integration Plugin 1 record LOW Plug-in For Winamp 1 record LOW

Records

9 records

TI-2019-04520 CVE-2019-6453 · GHSA-95vj-g5cr-7j53

mIRC before 7.55 allows remote command execution by using argument injection through…

HIGH 68

mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.54571 Published 2019-02-18 No fix listed CWE-88

TI-2008-04241 CVE-2008-4449 · GHSA-3xhg-6w83-qffm

Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary…

HIGH 67

Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIVMSG message.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.38737 Published 2008-10-06 No fix listed CWE-119

TI-2003-01236 CVE-2003-1336 · GHSA-48c9-rw99-398v

Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.

HIGH 66

Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.35706 Published 2007-09-23 No fix listed CWE-119

TI-2008-06995 CVE-2008-7314 · GHSA-x9vx-7gq2-65fm

mIRC before 6.35 allows attackers to cause a denial of service (crash) via a long nickname.

LOW 36

mIRC before 6.35 allows attackers to cause a denial of service (crash) via a long nickname.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01348 Published 2020-01-23 Fixed in 6.35 CWE-400

TI-2007-04262 CVE-2007-4402 · GHSA-xh5m-rf6f-g69m

Multiple unspecified scripts in mIRC allow user-assisted remote attackers to execute…

LOW 36

Multiple unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary code via the '|' (pipe) shell metacharacter in the name of the song in a .mp3 file.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03222 Published 2007-08-18 No fix listed

TI-2007-04263 CVE-2007-4403 · GHSA-hwq8-gxx8-crhc

The mIRC Control Plug-in for Winamp allows user-assisted remote attackers to execute…

LOW 35

The mIRC Control Plug-in for Winamp allows user-assisted remote attackers to execute arbitrary code via the '|' (pipe) shell metacharacter in the name of the song in a .mp3 file.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02899 Published 2007-08-18 No fix listed CWE-264

TI-2007-04261 CVE-2007-4401 · GHSA-7v4r-7vpf-mxwf

Multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin and…

LOW 35

Multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin and possibly other unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02381 Published 2007-08-18 No fix listed

TI-2011-04554 CVE-2011-5282 · GHSA-8gv2-3g44-v322

mIRC prior to 7.22 has a message leak because chopping of outbound messages is mishandled.

LOW 26

mIRC prior to 7.22 has a message leak because chopping of outbound messages is mishandled.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0108 Published 2020-01-21 Fixed in 7.22 CWE-200

TI-2003-01408 CVE-2003-1508 · GHSA-gmf2-67q7-xh48

Buffer overflow in mIRC 6.12, when the DCC get dialog window has been minimized and the…

LOW 24

Buffer overflow in mIRC 6.12, when the DCC get dialog window has been minimized and the user opens the minimized window, allows remote attackers to cause a denial of service (crash) via a long filename.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02083 Published 2007-10-25 No fix listed CWE-119

Open these records in search →

Critical	2
High	2
Medium	5
Low	0
No CVSS	0