Exploitation Summary
EIP tracks 3 public exploits for CVE-2003-1336.
PoCs published by Metasploit, blasty, including Metasploit module exploits/windows/browser/mirc_irc_url.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in mIRC 6.1 via an overly long IRC URL, allowing remote code execution. It uses SEH overwrites and targets specific Windows versions with predefined return addresses.
Description
Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.
Exploits (3)
This Metasploit module exploits a stack buffer overflow in mIRC 6.1 via an overly long IRC URL, allowing remote code execution. It uses SEH overwrites and targets specific Windows versions with predefined return addresses.
This exploit targets a buffer overflow in mIRC < 6.11 via a maliciously crafted irc:// URI embedded in an HTML file. It overwrites EIP with a JMP ESP address from ntdll.dll and executes shellcode to spawn cmd.exe.
This Metasploit module exploits a stack buffer overflow in mIRC 6.1 via a crafted IRC URL. It leverages SEH overwrite to achieve remote code execution on vulnerable Windows systems.