Description
Multiple CRLF injection vulnerabilities in the Advanced mIRC Integration Plugin and possibly other unspecified scripts in mIRC allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
References
- 25281 vdb-entry
- 3036 third-party-advisory
- 20070812 Vulnerability in multiple "now playing" scripts for various IRC clients mailing-list
- 20070812 Vulnerability in multiple "now playing" scripts for various IRC clients mailing-list
- irc-multiple-command-execution(35985) vdb-entry
- http://wouter.coekaerts.be/site/security/nowplaying
- 26491 third-party-advisory