Unscored severity · published Dec 31, 2005
CVE-2005-4681
Buffer overflow in mIRC 5.91, 6.03, 6.12, and 6.16 allows local users to execute arbitrary code via a long string that is entered after reaching the DCC Get Folder Dialog
–
CVSS
0.6%
EPSS
No
On KEV
Description
Buffer overflow in mIRC 5.91, 6.03, 6.12, and 6.16 allows local users to execute arbitrary code via a long string that is entered after reaching the DCC Get Folder Dialog. NOTE: this issue has been disputed by the vendor, saying "as far as I can tell, this is neither an exploit nor a vulnerability. The above report describes a local bug in mIRC." It could be that this is only exploitable by the user of the application, and thus would not cross privilege boundaries unless under an otherwise restrictive environment such as a kiosk
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MI
Mirc · Khaled Mardam-bey
5.91; 6.03; 6.12; 6.16 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-4681
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-4681
seclists.org
http://seclists.org/lists/bugtraq/2005/Dec/0263.html
securityreason.com
http://securityreason.com/securityalert/285
trout.snt.utwente.nl
http://trout.snt.utwente.nl/ubbthreads/showflat.php?Cat=0&Number=146129&an=0&page=0#146129
www.osvdb.org
http://www.osvdb.org/24116
Exploit
http://www.packetstormsecurity.org/0512-exploits/mIRCexploitXPSP2eng.c
www.shellsec.net
http://www.shellsec.net/leer_advisory.php?id=9
More from Mirc
–
CVE-2006-0489
Buffer overflow in the font command of mIRC, probably 6.16, allows local users to execute arbitrary code via a long string
–
CVE-2003-1512
Buffer overflow in mIRC 6.1 and 6.11 allows remote attackers to cause a denial of service (crash) via a long DCC SEND request
–
CVE-2002-1456
Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value
–
CVE-2002-0425
mIRC DCC server protocol allows remote attackers to gain sensitive information such as alternate IRC nicknames via a "100 testing" message in a DCC connection request that cannot…
–
CVE-2002-0231
Buffer overflow in mIRC 5.91 and earlier allows a remote server to execute arbitrary code on the client via a long nickname