CVE-2008-4449
mIRC 6.34 - Remote Code Execution via Long Hostname in PRIVMSG
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2008-4449.
PoCs published by Metasploit, SkD, securfrog, including Metasploit module exploits/windows/misc/mirc_privmsg_server.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in mIRC <= 6.34 via an excessively long PRIVMSG command. It leverages SEH overwrites and a JMP ESP technique to achieve remote code execution.
Description
Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIVMSG message.
Exploits (4)
This Metasploit module exploits a stack-based buffer overflow in mIRC <= 6.34 via an excessively long PRIVMSG command. It leverages SEH overwrites and a JMP ESP technique to achieve remote code execution.
This exploit targets a remote buffer overflow in mIRC 6.34 by sending a maliciously crafted IRC message to trigger a SEH overwrite and execute shellcode. It includes different return addresses for Windows XP SP3 and Vista SP0.
This exploit demonstrates a remote buffer overflow in mIRC 6.34 by sending a malformed PRIVMSG command with a long string of 'A's followed by two controlled bytes. It sets up a fake IRC server to trigger the vulnerability when a victim connects.
This Metasploit module exploits a stack-based buffer overflow in mIRC IRC Client v6.34 and earlier by sending an excessively long PRIVMSG command, allowing remote code execution. The exploit uses SEH overwrites and a JMP ESP technique to redirect execution to the payload.