mIRC USERHOST Buffer Overflow Vulnerability
BID:8728
Info
mIRC USERHOST Buffer Overflow Vulnerability
| Bugtraq ID: | 8728 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 29 2003 12:00AM |
| Updated: | Sep 29 2003 12:00AM |
| Credit: | The disclosure of this issue has been credited to Sylvain Descoteaux <[email protected]>. |
| Vulnerable: |
Khaled Mardam-Bey mIRC 6.1 Khaled Mardam-Bey mIRC 6.0 3 Khaled Mardam-Bey mIRC 6.0 2 Khaled Mardam-Bey mIRC 6.0 1 |
| Not Vulnerable: | |
Discussion
mIRC USERHOST Buffer Overflow Vulnerability
It has been reported that mIRC may be prone to a remote buffer overflow vulnerability due to insufficient boundary checking. The issue is reported to present itself when the client attempts to connect to a remote server. During the connection process the client is reported to a send a USERHOST request that is expected to be less than 110 bytes. A buffer overflow condition may occur if the server responds with a request that is larger than 110 bytes.
Successful exploitation of this issue may allow an attacker to execute arbitrary code in the context of the client in order to gain unauthorized access to a vulnerable system.
mIRC versions 6.01 to 6.1 have been reported to be prone to this issue, however other versions may be affected as well.
It has been reported that mIRC may be prone to a remote buffer overflow vulnerability due to insufficient boundary checking. The issue is reported to present itself when the client attempts to connect to a remote server. During the connection process the client is reported to a send a USERHOST request that is expected to be less than 110 bytes. A buffer overflow condition may occur if the server responds with a request that is larger than 110 bytes.
Successful exploitation of this issue may allow an attacker to execute arbitrary code in the context of the client in order to gain unauthorized access to a vulnerable system.
mIRC versions 6.01 to 6.1 have been reported to be prone to this issue, however other versions may be affected as well.
Exploit / POC
mIRC USERHOST Buffer Overflow Vulnerability
Exploit code has been provided and can be downloaded from the following location:
http://whiteroof.netfirms.com/userhost.zip
Exploit code has been provided and can be downloaded from the following location:
http://whiteroof.netfirms.com/userhost.zip
Solution / Fix
mIRC USERHOST Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.