BID:4027

MIRC Nick Buffer Overflow Vulnerability

Info

MIRC Nick Buffer Overflow Vulnerability

Bugtraq ID:	4027
Class:	Boundary Condition Error
CVE:	CVE-2002-0231
Remote:	Yes
Local:	No
Published:	Feb 03 2002 12:00AM
Updated:	Jul 11 2009 09:56AM
Credit:	This vulnerability was submitted to BugTraq on February 3rd, 2002 by "James Martin" <[email protected]>.
Vulnerable:	Khaled Mardam-Bey mIRC 5.91 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home Khaled Mardam-Bey mIRC 5.9 Khaled Mardam-Bey mIRC 5.8 Khaled Mardam-Bey mIRC 5.7 Khaled Mardam-Bey mIRC 5.6 Khaled Mardam-Bey mIRC 5.5 Khaled Mardam-Bey mIRC 5.4 Khaled Mardam-Bey mIRC 5.3 Khaled Mardam-Bey mIRC 5.1 Khaled Mardam-Bey mIRC 5.0 Khaled Mardam-Bey mIRC 4.7 Khaled Mardam-Bey mIRC 4.6 Khaled Mardam-Bey mIRC 4.5 Khaled Mardam-Bey mIRC 4.1 Khaled Mardam-Bey mIRC 4.0 Khaled Mardam-Bey mIRC 3.9 Khaled Mardam-Bey mIRC 3.8 Khaled Mardam-Bey mIRC 3.7 Khaled Mardam-Bey mIRC 3.6 Khaled Mardam-Bey mIRC 3.5 Khaled Mardam-Bey mIRC 3.4 Khaled Mardam-Bey mIRC 3.3 Khaled Mardam-Bey mIRC 3.2 Khaled Mardam-Bey mIRC 3.1 Khaled Mardam-Bey mIRC 2.8 c Khaled Mardam-Bey mIRC 2.7 a Khaled Mardam-Bey mIRC 2.5 a Khaled Mardam-Bey mIRC 2.4 a Khaled Mardam-Bey mIRC 2.4 Khaled Mardam-Bey mIRC 2.3 a Khaled Mardam-Bey mIRC 2.1 a - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 SR2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0

Not Vulnerable:	Khaled Mardam-Bey mIRC 6.0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home

Discussion

MIRC Nick Buffer Overflow Vulnerability

mIRC is a popular Internet Relay Chat client whichs runs of Microsoft Windows 9x/ME/NT/2000/XP operating systems.

A remote exploitable buffer overflow condition has been discovered in mIRC. This issue is due to improper bounds checking of nicknames sent by the server. A excessively long nickname (200+) is capable of overwriting stack variables. This may be exploited by a malicious server. This issue is also exploitable via a webpage that can instruct the client to launch and to make a connection to the malicious server.

This may lead to a full compromise of the host running the client software on some Windows systems.

Exploit / POC

MIRC Nick Buffer Overflow Vulnerability

This exploit was submitted by "James Martin" <[email protected]>.

/data/vulnerabilities/exploits/mircexploit-v591.c

Solution / Fix

MIRC Nick Buffer Overflow Vulnerability

Solution:
This issue has been addressed in mIRC 6.0. Users are advised to upgrade.

Khaled Mardam-Bey mIRC 2.1 a