mIRC Exploit Updates - Revision history

Admin at 03:23, 25 February 2009

Admin — Wed, 25 Feb 2009 03:23:21 GMT

← Older revision		Revision as of 03:23, 25 February 2009
Line 1:		Line 1:
	{{Historical}}		{{Historical}}

-	The current version of mIRC (6.34 as of ~~AUG~~ 2008) has no known exploits. You are encouraged to upgrade to this version if you haven't already.	+	The current version of mIRC (6.35 as of OCT 2008) has no known exploits. You are encouraged to upgrade to this version if you haven't already.

	== Do not click on Britney.jpg ==		== Do not click on Britney.jpg ==

Secretagent at 16:41, 8 September 2008

Secretagent — Mon, 08 Sep 2008 16:41:10 GMT

← Older revision		Revision as of 16:41, 8 September 2008
Line 1:		Line 1:
	{{Historical}}		{{Historical}}

-	The current version of mIRC (6.33 as of ~~JUL~~ 2008) has no known exploits. You are encouraged to upgrade to this version if you haven't already.	+	The current version of mIRC (6.34 as of AUG 2008) has no known exploits. You are encouraged to upgrade to this version if you haven't already.

	== Do not click on Britney.jpg ==		== Do not click on Britney.jpg ==

Nitemare at 12:44, 23 July 2008

Nitemare — Wed, 23 Jul 2008 12:44:42 GMT

← Older revision		Revision as of 12:44, 23 July 2008
Line 1:		Line 1:
	{{Historical}}		{{Historical}}

-	The current version of mIRC (6.21 as of ~~NOV 2006~~) has no known exploits. You are encouraged to upgrade to this version if you haven't already.	+	The current version of mIRC (6.33 as of JUL 2008) has no known exploits. You are encouraged to upgrade to this version if you haven't already.

	== Do not click on Britney.jpg ==		== Do not click on Britney.jpg ==

Admin at 06:27, 16 January 2008

Admin — Wed, 16 Jan 2008 06:27:04 GMT

← Older revision		Revision as of 06:27, 16 January 2008
Line 1:		Line 1:
-	{{~~Template:~~Historical}}	+	{{Historical}}

	The current version of mIRC (6.21 as of NOV 2006) has no known exploits. You are encouraged to upgrade to this version if you haven't already.		The current version of mIRC (6.21 as of NOV 2006) has no known exploits. You are encouraged to upgrade to this version if you haven't already.

Admin at 05:22, 29 October 2007

Admin — Mon, 29 Oct 2007 05:22:17 GMT

← Older revision		Revision as of 05:22, 29 October 2007
Line 1:		Line 1:
-	~~This article is maintained for historical reasons only.~~ The current version of mIRC (6.21 as of NOV 2006) has no known exploits. You are encouraged to upgrade to this version if you haven't already.	+	{{Template:Historical}}
		+
		+	The current version of mIRC (6.21 as of NOV 2006) has no known exploits. You are encouraged to upgrade to this version if you haven't already.

	== Do not click on Britney.jpg ==		== Do not click on Britney.jpg ==

Admin at 08:08, 26 October 2007

Admin — Fri, 26 Oct 2007 08:08:18 GMT

← Older revision		Revision as of 08:08, 26 October 2007
Line 29:		Line 29:
	Check the #Help topic for updates too. The information here was contributed by various helpers from many sources, working together in harmony without ego or drama, who knew. It is not an official message from the author of mIRC.		Check the #Help topic for updates too. The information here was contributed by various helpers from many sources, working together in harmony without ego or drama, who knew. It is not an official message from the author of mIRC.

-	[[Category:Exploits Prevention]]	+	[[Category:Exploits Prevention\|Mirc]]

Admin at 08:06, 26 October 2007

Admin — Fri, 26 Oct 2007 08:06:06 GMT

← Older revision		Revision as of 08:06, 26 October 2007
Line 29:		Line 29:
	Check the #Help topic for updates too. The information here was contributed by various helpers from many sources, working together in harmony without ego or drama, who knew. It is not an official message from the author of mIRC.		Check the #Help topic for updates too. The information here was contributed by various helpers from many sources, working together in harmony without ego or drama, who knew. It is not an official message from the author of mIRC.

-	[[Category:~~Documentation~~]]	+	[[Category:Exploits Prevention]]

Admin: New page: This article is maintained for historical reasons only. The current version of mIRC (6.21 as of NOV 2006) has no known exploits. You are encouraged to upgrade to this version if you haven'...

Admin — Tue, 07 Aug 2007 17:44:49 GMT

New page: This article is maintained for historical reasons only. The current version of mIRC (6.21 as of NOV 2006) has no known exploits. You are encouraged to upgrade to this version if you haven'...

New page

This article is maintained for historical reasons only. The current version of mIRC (6.21 as of NOV 2006) has no known exploits. You are encouraged to upgrade to this version if you haven't already.

== Do not click on Britney.jpg ==

This is not a mIRC bug, but it is an exploit that affects users of Windows IRC clients. Do not click on any URL that ends in Britney.JPG! A worm (self-propagating virus) is going around that spams IRC channels with a URL of an alleged Britney Spears picture. Do not click on that URL, it contains an Internet Explorer / Windows Media Player exploit. For more info see this page (ext. link). In fact, in general you should never click on URLs that come up in unsolicited messages.

== DCC Exploit Affecting 6.12 ==

On Oct 20 2003, another exploit was identified which can crash even the recently released version 6.12. It only seems to affect people who minimize DCC get dialog windows (manually or by default), and then open those windows to get a file with an excessively long filename. You can't be crashed unless that sequence of events occurs. That manual step is required. If you auto-get the file, or don't get the file at all, nothing happens.

If and only if you think the above affects you, then here is a temporary fix which should be pasted in your "remotes" section (alt-r to access). It basically rejects any excessively long filename.
<pre>
ctcp *:dcc send:*: if ($len($nopath($filename)) >= 225) { echo 4 -s $nick tried to crash you with an illegal dcc send of $nopath($filename) | halt }

or this shorter version without the warning message:

ctcp *:dcc send:*: if ($len($nopath($filename)) >= 225) halt</pre>

If you are not comfortable with modifying your remotes, you can just ignore all incoming DCC sends with the following, which is the same temporary fix as for the other bug described in the next section:

<pre>/ignore -wd *</pre>

You can undo the above command by /ignore -rwd * (note the r for remove).

== DCC Exploit Affecting 6.0-6.11 ==

Starting Oct 12, 2003, an exploit was used to crash many people's mIRC clients. All versions from 6.0 thru 6.11 were affected, version 6.12 was released Oct 13 to fix the problem. The exploit involves a DCC command which can be sent to any person or channel, no matter what your DCC options are. (DCC is used to trade files or for DCC chat.) Just download the new version to fix this problem.

Check the #Help topic for updates too. The information here was contributed by various helpers from many sources, working together in harmony without ego or drama, who knew. It is not an official message from the author of mIRC.

[[Category:Documentation]]