Read the docs
TI-2011-04554 Aliases CVE-2011-5282GHSA-8gv2-3g44-v322

mIRC prior to 7.22 has a message leak because chopping of outbound messages is mishandled.

Priority LOW 26CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

mIRC prior to 7.22 has a message leak because chopping of outbound messages is mishandled.

Why it matters now

EPSS 0.0108 65th percentileScored 2026-11-07
Fix Fixed mIRC (mIRC): 7.22

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
mIRCmIRCbefore 7.227.22Patch availableCNA
  • mIRC VendormIRC Affected before 7.22 Fixed in 7.22 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:mirc:mirc:*:*:*:*:*:*:*:*before 7.22VulnerablemIRC
  • cpe:2.3:a:mirc:mirc:*:*:*:*:*:*:*:* Versions before 7.22 Vulnerable ·mIRC

Remediation

  • Fix · CNA mIRC (mIRC) Fixed in 7.22

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-5282
  2. 2026-10-03 Alias added: GHSA-8gv2-3g44-v322

References

Advisory 1

  • TI-2019-04520 mIRC before 7.55 allows remote command execution by using argument injection through… CVSS 3.0HIGH 8.1
  • TI-2008-04241 Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary… CVSS 2.0HIGH 9.3
  • TI-2003-01236 Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL. CVSS 2.0HIGH 9.3
  • TI-2008-06995 mIRC before 6.35 allows attackers to cause a denial of service (crash) via a long nickname. CVSS 3.1HIGH 7.5
  • TI-2007-04262 Multiple unspecified scripts in mIRC allow user-assisted remote attackers to execute… CVSS 2.0MEDIUM 6.8
  • TI-2003-01408 Buffer overflow in mIRC 6.12, when the DCC get dialog window has been minimized and the… CVSS 2.0MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences