CVE-2019-6453
HIGHmIRC < 7.55 - Remote Command Execution via Custom URI Protocol Handler
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2019-6453. PoCs published by ProofOfCalc, proofofcalc, andripwn.
AI-analyzed exploit summary This exploit leverages argument injection via mIRC's URI protocol handlers to load a remote configuration file and execute arbitrary code. The PoC includes a custom mirc.ini and calc.ini to trigger a calc.exe payload.
Description
mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling (Chrome is not exploitable).
Exploits (3)
This exploit leverages argument injection via mIRC's URI protocol handlers to load a remote configuration file and execute arbitrary code. The PoC includes a custom mirc.ini and calc.ini to trigger a calc.exe payload.
This PoC demonstrates a Remote Code Execution vulnerability in mIRC <7.55 via argument injection through the irc:// URI protocol handler. It leverages a custom mirc.ini file hosted on a Samba server to execute arbitrary commands (e.g., calc.exe) when a victim visits a malicious HTML page.
This PoC demonstrates a Remote Code Execution (RCE) vulnerability in mIRC <7.55 via argument injection through the irc:// URI protocol handler. It leverages a custom mirc.ini file hosted on a Samba server to execute arbitrary commands, such as launching calc.exe.
References (6)
Scores
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H