Unrated severityNVD Advisory· Published Mar 10, 2007· Updated Jun 16, 2026

CVE-2007-1397

Description

Multiple stack-based buffer overflows in the (1) ExtractRnick and (2) decrypt_topic_332 functions in FiSH allow remote attackers to execute arbitrary code via long strings.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Fish/Fish3 versions
cpe:2.3:a:fish:fish:*:*:irssi_0.99:*:*:*:*:*+ 2 more
- cpe:2.3:a:fish:fish:*:*:irssi_0.99:*:*:*:*:*
- cpe:2.3:a:fish:fish:*:*:mirc_1.29:*:*:*:*:*
- cpe:2.3:a:fish:fish:*:*:xchat_0.98:*:*:*:*:*
osv-coords8 versions
pkg:apk/chainguard/fish pkg:apk/chainguard/fish-dev pkg:apk/chainguard/fish-doc pkg:apk/chainguard/fish-tools pkg:apk/wolfi/fish pkg:apk/wolfi/fish-dev pkg:apk/wolfi/fish-doc pkg:apk/wolfi/fish-tools
< 3.7.1-r3+ 7 more
- (no CPE)range: < 3.7.1-r3
- (no CPE)range: < 3.7.1-r3
- (no CPE)range: < 3.7.1-r3
- (no CPE)range: < 3.7.1-r3
- (no CPE)range: < 3.7.1-r3
- (no CPE)range: < 3.7.1-r3
- (no CPE)range: < 3.7.1-r3
- (no CPE)range: < 3.7.1-r3

cvss	0.000
epss	0.007
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000

CVE-2007-1397

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions