Skip to content

CVE-2003-1336

Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long...

9.3 HighPublic exploit

CVE-2003-1336 is a high vulnerability (CVSS 9.3) in Mirc, published December 31, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 35.7%, the 98th percentile. No source names a fixed version.

Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.

Exploit likelihood

35.7%Down 35.8 points since Feb 4, 2022

What each source reports

NVD Score used 9.3

Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.

Record: CVE-2003-1336
CVSS 2.0: 9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.

Record: CVE-2003-1336
Updated: 2026-11-02

EUVDEUVD-2003-1326 No score

Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.

Record: EUVD-2003-1326
Updated: 2026-11-03

GitHub AdvisoriesGHSA-48c9-rw99-398v No score

Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long...

Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.

Record: GHSA-48c9-rw99-398v
Weakness: CWE-119
Updated: 2026-11-02

Affected products

mirc

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	mIRC 6.1 - 'IRC' Protocol Remote Buffer Overflow	2003-10-21
Exploit-DB	mIRC - IRC URL Buffer Overflow (Metasploit)	2010-05-09
Metasploit	mIRC IRC URL Buffer Overflow	2003-10-13

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

References