PT-2025-38003 · Unknown · Talkative Irc

Published 2025-09-16 · Updated 2025-09-16 · CVE-2009-20007

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Talkative IRC version 0.4.4.16

Description Talkative IRC version 0.4.4.16 is susceptible to a stack-based buffer overflow when handling specially crafted response strings received from a connected client. An attacker can exploit this issue by sending an excessively long message, causing a fixed-length buffer to overflow, which could lead to arbitrary code execution within the vulnerable process. This flaw is remotely exploitable and does not require authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2009-20007

Affected Products

Talkative Irc

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2009-20007 · Security Note
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/talkative_response.rb · Note
• https://zeroscience.mk/en/vulnerabilities/ZSL-2009-4909.php · Note
• https://exploit-db.com/exploits/8227 · Note
• https://exploit-db.com/exploits/16459 · Note
• https://web.archive.org/web/20090116203306/http://talkative-irc.com · Note
• https://vulncheck.com/advisories/talkative-irc-response-buffer-overflow · Note
• https://t.me/CVEtracker/32652 · Telegram Post