CVE-2007-1397: Buffer Overflow
Published Mar 10, 2007
·Updated
Multiple stack-based buffer overflows in the (1) ExtractRnick and (2) decrypttopic332 functions in FiSH allow remote attackers to execute arbitrary code via long strings.
Affected Software
4 affected componentsFixes available
Event History
Mar 10, 2007
CVE Published
10:19 PM
Mar 11, 2007
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Oct 1, 2025
Data Sourced
via Microsoft·11:10 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·11:10 PM
Affected Software
Updated
via Microsoft·11:10 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2007-1397?
CVE-2007-1397 is considered a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2007-1397?
To fix CVE-2007-1397, update to the latest version of the affected software that includes patches for this vulnerability.
3
Which software is affected by CVE-2007-1397?
CVE-2007-1397 affects several versions of the Fish Shell used in applications like irssi, xchat, and mirc.
4
What kind of attack exploits CVE-2007-1397?
CVE-2007-1397 can be exploited via specially crafted long strings, leading to stack-based buffer overflows.
5
Can CVE-2007-1397 be exploited remotely?
Yes, CVE-2007-1397 can be exploited remotely by attackers to execute arbitrary code on vulnerable systems.