| Package | Affected versions | Patched versions |
|---|---|---|
| mirc | < 7.55 | 7.55 |
mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling (Chrome is not exploitable).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free