https://cxsecurity.com/issue/WLB-2007100124
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200312-294

mIRC6.12版本存在缓冲区溢出漏洞。当DCC取得对话框窗口已被最小化且用户打开最小化的窗口时，远程攻击者借助超长文件名导致服务拒绝（崩溃）。

this news was found on irchelp, DCC Exploit Affecting mIRC 6.12 :

another exploit was identified which can crash even the recently released version 6.12. It only seems to affect people who minimize DCC get dialog windows (manually or by default), and then open those windows to get a file with an excessively long filename. You can't be crashed unless that sequence of events occurs. That manual step is required. If you auto-get the file, or don't get the file at all, nothing happens.

If and only if you think the above affects you, then here is a temporary fix which should be pasted in your "remotes" section (alt-r to access). It basically rejects any excessively long filename.

ctcp *:dcc send:*: if ($len($nopath($filename)) >= 225) { echo 4 -s $nick tried to crash you with an illegal dcc send of $nopath($filename) | halt }

or this shorter version without the warning message:

ctcp *:dcc send:*: if ($len($nopath($filename)) >= 225) halt

If you are not comfortable with modifying your remotes, you can just ignore all incoming DCC sends with the following, which is the same temporary fix as for the other bug described in the next section:

/ignore -wd *

You can undo the above command by /ignore -rwd * (note the r for remove).

Regards.

K-OTik Staff /// http://www.k-otik.com

来源:BID
名称:8880
链接:http://www.securityfocus.com/bid/8880
来源:BUGTRAQ
名称:20031023(Fw):mIRC6.12(latest)DCCExploit
链接:http://www.securityfocus.com/archive/1/342179
来源:www.irchelp.org
链接:http://www.irchelp.org/irchelp/mirc/exploit.html
来源:SREASON
名称:3303
链接:http://securityreason.com/securityalert/3303