Exploitation Summary
EIP tracks 3 public exploits for CVE-2009-20007.
PoCs published by Metasploit, LiquidWorm, MC, including Metasploit module exploits/windows/misc/talkative_response.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in Talkative IRC v0.4.4.16 by sending a crafted response string to a client, allowing arbitrary code execution. The exploit uses a TCP server to deliver the payload and leverages a known return address for Windows XP SP3 English.
Description
Talkative IRC v0.4.4.16 is vulnerable to a stack-based buffer overflow when processing specially crafted response strings sent to a connected client. An attacker can exploit this flaw by sending an overly long message that overflows a fixed-length buffer, potentially leading to arbitrary code execution in the context of the vulnerable process. This vulnerability is exploitable remotely and does not require authentication.
Exploits (3)
This Metasploit module exploits a stack buffer overflow in Talkative IRC v0.4.4.16 by sending a crafted response string to a client, allowing arbitrary code execution. The exploit uses a TCP server to deliver the payload and leverages a known return address for Windows XP SP3 English.
This Perl script exploits a stack-based buffer overflow in Talkative IRC 0.4.4.16 by sending a crafted PRIVMSG to overwrite SEH and EIP, leading to arbitrary code execution via a bind shell on port 6161.
This Metasploit module exploits a stack buffer overflow in Talkative IRC v0.4.4.16 by sending a crafted response string to a client, allowing arbitrary code execution. The exploit uses a TCP server to deliver the payload, leveraging a known return address for Windows XP SP3 English.
References (6)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N