CVE-2019-6453
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
37Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 55%
from disclosure to weaponsame day
Published on NVDFeb 18
1st PoCFeb 18
mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling (Chrome is not exploitable).
Affected products
n/a · n/apublic PoCs found — 4
exploitdbwww.exploit-db.com/exploits/46392unverifiedgithubgithub.com/proofofcalc/cve-2019-6453-poc★ 48githubgithub.com/andripwn/mIRC-CVE-2019-6453★ 1cve_referencewww.exploit-db.com/exploits/46392/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.