Although mIRC could/should do some sanitizing the problem actually
lays in Windows' handling of URIs.

See http://secunia.com/advisories/26201/

- Fred