CVE-2008-7314

< 6.35

mIRC before 6.35 allows attackers to cause a denial of service (crash) via a long nickname.

7.5HIGH

CVE-2011-5282

< 7.22

mIRC prior to 7.22 has a message leak because chopping of outbound messages is mishandled.

5.3MEDIUM

CVE-2019-6453

< 7.55

mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker ca

8.1HIGH

CVE-2008-4449

all versions

Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIVMSG messag

CVE-2007-4403

all versions

The mIRC Control Plug-in for Winamp allows user-assisted remote attackers to execute arbitrary code via the '|' (pipe) shell metac

CVE-2007-4402

all versions

Multiple unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary code via the '|' (pipe) shell metac

CVE-2007-4401

all versions

Multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin and possibly other unspecified scripts in mIRC all

CVE-2006-0489

all versions

Buffer overflow in the font command of mIRC, probably 6.16, allows local users to execute arbitrary code via a long string. NOTE:

CVE-2005-4681

all versions

Buffer overflow in mIRC 5.91, 6.03, 6.12, and 6.16 allows local users to execute arbitrary code via a long string that is entered

CVE-2003-1512

all versions

Buffer overflow in mIRC 6.1 and 6.11 allows remote attackers to cause a denial of service (crash) via a long DCC SEND request.

CVE-2003-1508

all versions

Buffer overflow in mIRC 6.12, when the DCC get dialog window has been minimized and the user opens the minimized window, allows re

CVE-2003-1336

<= 6.1

Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.

CVE-2002-1456

all versions

Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value.

CVE-2002-0425

all versions

mIRC DCC server protocol allows remote attackers to gain sensitive information such as alternate IRC nicknames via a "100 testing"

CVE-2002-0231

all versions

Buffer overflow in mIRC 5.91 and earlier allows a remote server to execute arbitrary code on the client via a long nickname.

CVE-2001-0944

all versions

DDE in mIRC allows local users to launch applications under another user's account via a DDE message that executes a command, whic

CVE-2001-0315

<= 5.7

The locking feature in mIRC 5.7 allows local users to bypass the password mechanism by modifying the LockOptions registry key.

CVE-1999-0399

all versions

The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to pla