PT-2005-5346 · Mirc · Mirc

Jordi Corrales · Published 2005-12-31 · Updated 2024-08-08 · CVE-2005-4681

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions mIRC versions 5.91 through 6.16

Description A buffer overflow issue allows local users to potentially execute arbitrary code by entering a long string after reaching the DCC Get Folder Dialog. The vendor has disputed this issue, suggesting it may be a local bug rather than a vulnerability, potentially only exploitable by the application user and not crossing privilege boundaries unless in a restrictive environment.

Recommendations For mIRC versions 5.91 through 6.16, consider avoiding entering long strings after reaching the DCC Get Folder Dialog as a temporary workaround until a patch is available or further clarification is provided by the vendor.

Exploit

Fix

Related Identifiers

CVE-2005-4681

Affected Products

Mirc

References · 7

• 🔥 http://packetstormsecurity.org/0512-exploits/mIRCexploitXPSP2eng.c · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4681 · Security Note
• http://seclists.org/lists/bugtraq/2005/Dec/0263.html · Note
• http://securityreason.com/securityalert/285 · Note
• http://osvdb.org/24116 · Note
• http://trout.snt.utwente.nl/ubbthreads/showflat.php?Cat=0&Number=146129&an=0&page=0#146129 · Note
• http://shellsec.net/leer_advisory.php?id=9 · Note