mIRC unfiltered shell characters vulnerability
Published:		04.10.2007
Source:		BUGTRAQ
SecurityVulns ID:		8207
Type:		remote
Level:		6/10
Description:		Shell characters are not filtered on invoking external URL handler, making it's possible to use URLs like mailto:%xx../../../../../../../../../../../windows/system32/calc.exe".bat

Affected:

MIRC : mIRC 6.3

Original document

jinc4fareijj_(at)_hotmail.com, 0day: mIRC pwns Windows (04.10.2007)

Discuss:

Read or add your comments to this news (0 comments)