{"id":"CVE-2009-20007","title":"Talkative IRC v0.4.4.16 is vulnerable to a stack-based buffer overflow when processing specially crafted response strings sent to a connected client","summary":"Talkative IRC v0.4.4.16 is vulnerable to a stack-based buffer overflow when processing specially crafted response strings sent to a connected client. An attacker can exploit this flaw by sending an overly long message that overflows a fi…","severity":"none","cwe":["CWE-121"],"published":"2025-09-16","updated":"2026-10-01","sourceUpdated":"2026-10-01T23:10:00.233","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2009-20007","references":[{"url":"https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/talkative_response.rb","label":"disclosure@vulncheck.com"},{"url":"https://web.archive.org/web/20090116203306/http://www.talkative-irc.com/","label":"disclosure@vulncheck.com"},{"url":"https://www.exploit-db.com/exploits/16459","label":"disclosure@vulncheck.com"},{"url":"https://www.exploit-db.com/exploits/8227","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/talkative-irc-response-buffer-overflow","label":"disclosure@vulncheck.com"},{"url":"https://www.zeroscience.mk/en/vulnerabilities/ZSL-2009-4909.php","label":"disclosure@vulncheck.com"},{"url":"https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/talkative_response.rb","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://www.exploit-db.com/exploits/16459","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://www.exploit-db.com/exploits/8227","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://www.zeroscience.mk/en/vulnerabilities/ZSL-2009-4909.php","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","exploit-available"],"epss":0.01398,"epssPercentile":0.71441,"exploits":{"metasploit":["exploit/windows/misc/talkative_response"],"checkedAt":"2026-10-02T00:05:28.622Z"},"exploitAvailable":true,"ingestedAt":"2026-10-02T00:04:54.714Z","slug":"CVE-2009-20007","body":"## Overview\n\nTalkative IRC v0.4.4.16 is vulnerable to a stack-based buffer overflow when processing specially crafted response strings sent to a connected client. An attacker can exploit this flaw by sending an overly long message that overflows a fixed-length buffer, potentially leading to arbitrary code execution in the context of the vulnerable process. This vulnerability is exploitable remotely and does not require authentication.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":15,"depthScoreParts":{"impact":2.8,"likelihood":0.3,"exploitation":12,"ransomware":0},"changes":[]}