Security Advisory

CVE-2019-6453

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-02-18 15:00:00

Last updated 2024-08-04 20:23:20

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling (Chrome is not exploitable).

← Browse all CVEs View on cve.org ↗