CVE-2009-20007
CRITICAL EPSS 74.1%
Published Sep 16, 20259mo ago · Modified Jun 16, 20262w ago
9.3 CVSS 4.0
Published Sep 16, 2025 9mo ago
Last Modified Jun 16, 2026 2w ago
Description
Talkative IRC v0.4.4.16 is vulnerable to a stack-based buffer overflow when processing specially crafted response strings sent to a connected client. An attacker can exploit this flaw by sending an overly long message that overflows a fixed-length buffer, potentially leading to arbitrary code execution in the context of the vulnerable process. This vulnerability is exploitable remotely and does not require authentication.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X
Threat Intelligence
EPSS Exploit Probability
74.1% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-121
References 6
- raw.githubusercontent.com https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/talkative_response.rb
- web.archive.org https://web.archive.org/web/20090116203306/http://www.talkative-irc.com/
- exploit-db.com https://www.exploit-db.com/exploits/16459
- exploit-db.com https://www.exploit-db.com/exploits/8227
- vulncheck.com https://www.vulncheck.com/advisories/talkative-irc-response-buffer-overflow
- zeroscience.mk https://www.zeroscience.mk/en/vulnerabilities/ZSL-2009-4909.php
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.