CVE-2007-1397

fish - Stack-Based Buffer Overflow in ExtractRnick and decrypt_topic_332 Functions

Title source: llm

Exploitation Summary

EIP tracks 2 public exploits for CVE-2007-1397. PoCs published by ilja van sprundel, Caleb James DeLisle.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in FiSH IRC encryption (CVE-2007-1397) by sending a maliciously crafted PRIVMSG to a victim IRC client. The payload includes NOP sleds and shellcode to execute arbitrary code (in this case, shutting down irssi).

Description

Multiple stack-based buffer overflows in the (1) ExtractRnick and (2) decrypt_topic_332 functions in FiSH allow remote attackers to execute arbitrary code via long strings.

Exploits (2)

exploitdb WORKING POC VERIFIED

by ilja van sprundel · perldoswindows

https://www.exploit-db.com/exploits/29721

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in FiSH IRC encryption (CVE-2007-1397) by sending a maliciously crafted PRIVMSG to a victim IRC client. The payload includes NOP sleds and shellcode to execute arbitrary code (in this case, shutting down irssi).

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: FiSH IRC encryption plugin (used with irssi)

No auth needed

Prerequisites: Victim must connect to the malicious IRC server · FiSH plugin must be loaded in the victim's IRC client

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1190 - Exploit Public-Facing Application

devstral-2 · analyzed Feb 16, 2026 Full analysis →

exploitdb WORKING POC

by Caleb James DeLisle · perlremotelinux

https://www.exploit-db.com/exploits/17181