Unscored severity · published Nov 4, 2005
CVE-2005-3491
Multiple buffer overflows in the receiver function in loop.c in FlatFrag 0.3 and earlier allow remote attackers to execute arbitrary code via the (1) version, (2) name, and (3)…
–
CVSS
4.9%
EPSS
No
On KEV
Description
Multiple buffer overflows in the receiver function in loop.c in FlatFrag 0.3 and earlier allow remote attackers to execute arbitrary code via the (1) version, (2) name, and (3) model fields.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.9% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FL
Flatfrag · Johannes F. Kuhlmann
0.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3491
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3491
Exploit
http://aluigi.altervista.org/adv/flatfragz-adv.txt
marc.info
http://marc.info/?l=full-disclosure&m=113096078606274&w=2
www.osvdb.org
http://www.osvdb.org/20769
www.securityfocus.com
http://www.securityfocus.com/archive/1/415636/30/0/threaded
Exploit
http://www.securityfocus.com/bid/15287
More from Flatfrag
–
CVE-2005-3492
FlatFrag 0.3 and earlier allows remote attackers to cause a denial of service (crash) by sending an NT_CONN_OK command from a client that is not connected, which triggers a null…