CVE-2003-0612
Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games"...
Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin.
- Record
CVE-2003-0612- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin.
- Record
CVE-2003-0612- Updated
- 2026-11-02
EUVDEUVD-2003-0606 No score
Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin.
- Record
EUVD-2003-0606- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g472-r4fp-fq76 No score
Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games"...
Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin.
- Record
GHSA-g472-r4fp-fq76- Updated
- 2026-11-02
OSV No score
Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin.
- Record
CVE-2003-0612- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0612 No score
Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin.
- Record
DEBIAN-CVE-2003-0612- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
craftyDebian:12 |
before 19.3-1, plus listed versions 14.11-315.20-215.20-2.117.6-117.7-118.12-4 |
19.3-1 |
craftyDebian:13 |
before 19.3-1, plus listed versions 14.11-315.20-215.20-2.117.6-117.7-118.12-4 |
19.3-1 |
craftyDebian:14 |
before 19.3-1, plus listed versions 14.11-315.20-215.20-2.117.6-117.7-118.12-4 |
19.3-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0612 is a medium vulnerability (CVSS 4.6) in Robert Hyatt Crafty, published March 10, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in crafty 19.3-1.