YAMB (Yet another mIRC bug)

Discussion of and help with popular IRC Clients.

Moderators: Website/Forum Admins, Software/IRC Clients Moderators

User avatar
HM2K
Posts: 209
Joined: Thu Jul 24, 2003 5:34 pm
Location: UK
Contact:

YAMB (Yet another mIRC bug)

Postby HM2K » Tue Oct 21, 2003 1:42 pm

Thought i'd be the first to post... yet again...

DCC Exploit Affecting 6.12

Breaking News. On Oct 20, another exploit was identified which can crash even the recently released version 6.12. It only seems to affect people who minimize DCC get dialog windows (manually or by default), and then open those windows to get a file with an excessively long filename. You can't be crashed unless that sequence of events occurs. That manual step is required. If you auto-get the file, or don't get the file at all, nothing happens.
If and only if you think the above affects you, then here is a temporary fix which should be pasted in your "remotes" section (alt-r to access). It basically rejects any excessively long filename.

ctcp *:dcc send:*: if ($len($nopath($filename)) >= 225) { echo 4 -s $nick tried to crash you with an illegal dcc send of $nopath($filename) | halt }

or this shorter version without the warning message:

ctcp *:dcc send:*: if ($len($nopath($filename)) >= 225) halt



If you are not comfortable with modifying your remotes, you can just ignore all incoming DCC sends with the following, which is the same temporary fix as for the other bug described in the next section:
/ignore -wd *

DCC Exploit Affecting 6.0-6.11
Starting Oct 12, 2003, an exploit was used to crash many people's mIRC clients. All versions from 6.0 thru 6.11 were affected, version 6.12 was released Oct 13 to fix the problem. The exploit involves a DCC command which can be sent to any person or channel, no matter what your DCC options are. (DCC is used to trade files or for DCC chat.) Just download the new version to fix this problem.

Check EFnet #mIRC topic (use /raw list #mIRC if you cannot join) for updates too. The information was contributed by EFnet helpers from many sources, working together in harmony without ego or drama, who knew. It is not an official message from the author of mIRC.

Source: http://www.irchelp.org/irchelp/mirc/exploit.html

(Damn, it took ages removing that damn crc check on 6.12, now I'll have do it again :p)
- HM2K - https://hm2k.org/

Who is online

Users browsing this forum: No registered users and 6 guests