Please note that the recent report of a DCC exploit in 6.14 is false.
The person who published the report had not tested the issue properly and had not waited for confirmation from others to validate the bug report. He later found that the problem had nothing to with mIRC and instead was due to an incorrectly written script.
For some reason, many IRC-related websites published the false bug report without verifying it. They have now started to retract their statements, eg. DALnet, Quakenet, and so forth. You can also read more about this story here.
Note that the script affected is ‘Scripted Version Changer for mIRC 6+ by Spion’. If you have previously downloaded this script, you should unload it.
