CVE-2005-3486

Multiple format string vulnerabilities in Scorched 3D 39.1 (bf) and earlier allow remote...

7.5 HighPublic exploitFix available

Multiple format string vulnerabilities in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary code via various (1) GLConsole::addLine, (2) ServerCommon::sendString, (3) ServerCommon::serverLog functions, and possibly other unspecified vectors.

Exploit likelihood

11.5%Up 3.7 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2005-3486
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2005-3486
Updated: 2026-11-02

EUVDEUVD-2005-3485 No score

Record: EUVD-2005-3485
Updated: 2026-11-03

GitHub AdvisoriesGHSA-3pgv-hwxj-pq2c No score

Multiple format string vulnerabilities in Scorched 3D 39.1 (bf) and earlier allow remote...

Record: GHSA-3pgv-hwxj-pq2c
Updated: 2026-11-02

OSV No score

Record: CVE-2005-3486
Updated: 2026-11-02

OSVDEBIAN-CVE-2005-3486 No score

Record: DEBIAN-CVE-2005-3486
Updated: 2026-11-02

Affected products

scorched 3d 3d

Affected packages

Affected packages
Package	Affected	Fixed
`scorched3d` Debian:12	before 39.1+cvs20050929-2	39.1+cvs20050929-2
`scorched3d` Debian:13	before 39.1+cvs20050929-2	39.1+cvs20050929-2
`scorched3d` Debian:14	before 39.1+cvs20050929-2	39.1+cvs20050929-2

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Scorched 3D 39.1 - Multiple Vulnerabilities (PoC)	2005-11-02

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-3486 is a high vulnerability (CVSS 7.5) in Scorched 3d 3d, published November 3, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.5%, the 96th percentile. Fixed in scorched3d 39.1+cvs20050929-2.