Vulnerabilities

mIRC before 6.35 allows attackers to cause a denial of service (crash) via a long nickname.

mIRC prior to 7.22 has a message leak because chopping of outbound messages is mishandled.

mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers.

Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIVMSG message.

Buffer overflow in mIRC 6.12, when the DCC get dialog window has been minimized and the user opens the minimized window, allows remote attackers to cause a denial of service (crash) via a long filename.

Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.

Multiple unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary code via the '|' (pipe) shell metacharacter in the name of the song in a .mp3 file.