Forums Bug Reports mIRC 6.12 exploit

Hey.

Don't know if this is genuine or not. But read several places that there should be a exploit in 6.12 similar to the one just fixed? EFnet has posted about it, guess it's not a hoax then.

EFnet link
irchelp.org link

Is this so ? Could anyone please tell me. If it is I might just as well go back to 6.03, at least in certain dlls work with this version.

Regards.

Yes, it is true.
However, that same EFnet link offers a pretty easy temporary fix, so I don't see a need to downgrade, at least not when relating to this exploit.

Not only are there several easy fixes posted around, it is also much harder to exploit a user with 6.12 than it is with 6.03. For one, you have to have your DCCs minimised for it to work, and how many people have that set?

Downgrading to 6.03 is a bad idea, it just means it's MUCH easier to exploit you (seeing as now the exploit is common knowledge) and if you want to avoid it, you'll have to ignore DCCs completely.

The exploit has been known about since around 2 days after 6.12 was released, so taking into account how long that has been, and how many times have you been exploited, is the downgrade worth it? Personally, I have never been exploited with 6.12, and yet several people have attempted to use the other 6.x exploit against me.

Happy chatting!

Regards,

Hey all.

I apperciate your replys. And no, so far nobody has used the 6.12 expolit on me. But then again, nobody has used the 6.03 expliot on me either. Concerning DCC, well, I never us it anyway, so disabling it wouldn't be disadvantage to me. I there any know properly working fix for the 6.03 exploit, besides disabling DCC?
Well, the main reason for me to downgrade, if I choose to do so, is that the menuedit.dll does not work with 6.12 but does with 6.03. Unless any of you know of a similar dll working with 6.12.
Thanks.

There are numerous addons flying around scripting websites which claim to block the exploit, however, there are several different variations of it so I doubt that any of them block them ALL.

The safest way is to just use /ignore -dw * - if you're determined to downgrade that is.

As for that DLL, I suggest searching around www.mircscripts.org (it has a search feature) and also contacting the author of the DLL to let him know that he is meant to work with mIRC, not the other way round

G'luck, and happy chatting.

Regards,

Hey.

Thanks again. As for searching mircscripts.org. Done that. No results besides the post I've made a few days ago, still not replied. Just as it is in a few other forums I've posted it in. Concerning the author of the dll. Think he decided to not work with mirc at all since his hp is closed.
But thanks anyway. At least you tried.

Regards

You're very welcome, I hope that in future your problem gets resolved

Happy chatting!

Regards,

my addon blocks them all.