CVE-2019-6453

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling (Chrome is not exploitable).

Metrics

CVSS 3.0 8.1/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-88

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/proofofcalc/cve-2019-6453-pocExploit, Third Party Advisory
https://proofofcalc.com/advisories/20190218.txtThird Party Advisory
https://proofofcalc.com/cve-2019-6453-mIRC/Exploit, Third Party Advisory
https://twitter.com/proofofcalc/status/1097518413143003136Exploit, Third Party Advisory
https://www.exploit-db.com/exploits/46392/Exploit, Third Party Advisory, VDB Entry
https://www.mirc.com/news.htmlProduct
https://github.com/proofofcalc/cve-2019-6453-pocExploit, Third Party Advisory
https://proofofcalc.com/advisories/20190218.txtThird Party Advisory
https://proofofcalc.com/cve-2019-6453-mIRC/Exploit, Third Party Advisory
https://twitter.com/proofofcalc/status/1097518413143003136Exploit, Third Party Advisory
https://www.exploit-db.com/exploits/46392/Exploit, Third Party Advisory, VDB Entry
https://www.mirc.com/news.htmlProduct

Timeline

Published: Feb 18, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-64545.5An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack CVE-2019-64556.5An issue was discovered in GNU Recutils 1.8. There is a double-free problem in the function rec_mset_elem_destroy() in the file rec-mset.c.CVE-2019-64566.5An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_fex_size() in the file rec-fex.c of lib CVE-2019-64576.5An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_aggregate_reg_new in rec-aggregate.c in librec.a.CVE-2019-64586.5An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_buf_new in rec-buf.c when called from rec_parse_rset in rec-parse CVE-2019-64596.5An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_extract_type in rec-utils.c in librec.a.CVE-2019-64606.5An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_field_set_name() in the file rec-field.CVE-2019-64616.5An issue was discovered in cairo 1.16.0. There is an assertion problem in the function _cairo_arc_in_direction in the file cairo-arc.c.CVE-2019-64626.5An issue was discovered in cairo 1.16.0. There is an infinite loop in the function _arc_error_normalized in the file cairo-arc.c, related to CVE-2019-64655.3Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BI CVE-2019-64677.5A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-r CVE-2019-64687.5In BIND Supported Preview Edition, an error in the nxdomain-redirect feature can occur in versions which support EDNS Client Subnet (ECS) fe