CVE-2019-6453

This PoC demonstrates a Remote Code Execution vulnerability in mIRC <7.55 via argument injection through the irc:// URI protocol handler. It leverages a custom mirc.ini file hosted on a Samba server to execute arbitrary commands (e.g., calc.exe) when a victim visits a malicious HTML page.

This PoC demonstrates a Remote Code Execution (RCE) vulnerability in mIRC <7.55 via argument injection through the irc:// URI protocol handler. It leverages a custom mirc.ini file hosted on a Samba server to execute arbitrary commands, such as launching calc.exe.

This exploit leverages argument injection via mIRC's URI protocol handlers to load a remote configuration file and execute arbitrary code. The PoC includes a custom mirc.ini and calc.ini to trigger a calc.exe payload.