mIRC Scripting ASCTime Buffer Overflow Vulnerability
BID:5576
Info
mIRC Scripting ASCTime Buffer Overflow Vulnerability
| Bugtraq ID: | 5576 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2002-1456 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 27 2002 12:00AM |
| Updated: | Jul 11 2009 03:56PM |
| Credit: | Discovered by "James Martin" <[email protected]>. |
| Vulnerable: |
Khaled Mardam-Bey mIRC 6.0 2 Khaled Mardam-Bey mIRC 6.0 1 Khaled Mardam-Bey mIRC 6.0 |
| Not Vulnerable: |
Khaled Mardam-Bey mIRC 6.0 3 |
Discussion
mIRC Scripting ASCTime Buffer Overflow Vulnerability
mIRC is a chat client for the IRC protocol, designed for Microsoft Windows based operating systems. mIRC includes support for a scripting language.
A buffer overflow vulnerability has been reported in the $asctime identifier, a function in the mIRC scripting language. The error lies in the handling over oversized format specifier strings.
Exploitation will rely on a script passing untrusted input to this function. Reportedly, no such script is included in the default installation of mIRC.
mIRC is a chat client for the IRC protocol, designed for Microsoft Windows based operating systems. mIRC includes support for a scripting language.
A buffer overflow vulnerability has been reported in the $asctime identifier, a function in the mIRC scripting language. The error lies in the handling over oversized format specifier strings.
Exploitation will rely on a script passing untrusted input to this function. Reportedly, no such script is included in the default installation of mIRC.