CVE-2006-0489
CVE-2006-0489 is a medium-severity vulnerability in Khaled Mardam-bey Mirc with a CVSS 2.0 base score of 4.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 4.6)
- EPSS exploit prediction: 0% (37th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Khaled Mardam-bey Mirc
- Published:
- Last modified:
Description
Buffer overflow in the font command of mIRC, probably 6.16, allows local users to execute arbitrary code via a long string. NOTE: the original researcher claims that issue has been disputed by the vendor, and that the vendor stated "as far as I can tell, this is neither an exploit nor a vulnerability. The above report describes a local bug in mIRC." It could be that this is only exploitable by the user of the application, and thus would not cross privilege boundaries unless under an otherwise restrictive environment such as a kiosk
Frequently asked questions
- What is CVE-2006-0489?
- Buffer overflow in the font command of mIRC, probably 6.16, allows local users to execute arbitrary code via a long string. NOTE: the original researcher claims that issue has been disputed by the vendor, and that the vendor stated "as far as I can tell, this is neither an exploit nor a vulnerability. The above report describes a local bug in mIRC." It could be that this is only exploitable by the user of the application, and thus would not cross privilege boundaries unless under an otherwise restrictive environment such as a kiosk
- How severe is CVE-2006-0489?
- CVE-2006-0489 has a CVSS 2.0 base score of 4.6, rated medium severity.
- Is CVE-2006-0489 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (37th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2006-0489?
- CVE-2006-0489 affects Khaled Mardam-bey Mirc. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2006-0489?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2006-0489 published?
- CVE-2006-0489 was published on 2006-02-01 and last updated on 2026-06-16.
References
- http://securityreason.com/securityalert/383
- http://trout.snt.utwente.nl/ubbthreads/showflat.php?Cat=0&Board=bugreports&Number=118751
- http://www.osvdb.org/22942
- http://www.securiteam.com/windowsntfocus/5IP080AHPQ.html
- http://www.securityfocus.com/archive/1/423192/100/0/threaded
- http://www.securityfocus.com/archive/1/423758/100/0/threaded
Affected products (1)
- cpe:2.3:a:khaled_mardam-bey:mirc:6.16:*:*:*:*:*:*:*
More vulnerabilities in Khaled Mardam-bey Mirc
- CVE-2002-1456 — High (CVSS 7.5): Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value.
- CVE-2002-0231 — High (CVSS 7.5): Buffer overflow in mIRC 5.91 and earlier allows a remote server to execute arbitrary code on the client via a long…
- CVE-2001-0315 — High (CVSS 7.5): The locking feature in mIRC 5.7 allows local users to bypass the password mechanism by modifying the LockOptions…
- CVE-1999-0399 — High (CVSS 7.5): The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote…
- CVE-2001-0944 — High (CVSS 7.2): DDE in mIRC allows local users to launch applications under another user's account via a DDE message that executes a…
- CVE-2003-1512 — Medium (CVSS 5.0): Buffer overflow in mIRC 6.1 and 6.11 allows remote attackers to cause a denial of service (crash) via a long DCC SEND…