7.5
CVSSv2

CVE-2007-3612

Published: 06/07/2007 Updated: 29/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Stack-based buffer overflow in Visual IRC (ViRC) 2.0 allows remote IRC servers to execute arbitrary code via a long response to a JOIN command.

Vulnerable Product Search on Vulmon Subscribe to Product

visual irc visual irc 2.0

Exploits

#!/usr/bin/python # ViRC 20 'JOIN Response' 0day Remote SEH Overwrite PoC Exploit # Bug discovered by Krystian Kloskowski (h07) <h07@interiapl> # Tested on Visual IRC 20 / 2k SP4 Polish # Shellcode type: Windows Execute Command (calcexe) # How stuff works ? # # [ViRC] -----> (JOIN) -------------> [exploit_tunnel] ------------ ...