{"id":"CVE-2005-3279","aliases":["EUVD-2005-3278","GHSA-pr2v-gvjp-qp66"],"status":"published","title":"Stack-based buffer overflow in the vgasco_printf function in Jan Kybic BitMap Viewer (BMV) 1.2,...","description":"Stack-based buffer overflow in the vgasco_printf function in Jan Kybic BitMap Viewer (BMV) 1.2, when compiled with the M_UNIX flag and running setuid, allows local users to gain privileges via a long filename in the -b command line option.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00343,"percentile":0.28026,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2005-10-23T04:00:00Z","modified":"2026-06-16T22:16:38Z","products":[{"vendor":"jan_kybic","product":"bitmap_viewer"}],"references":[{"url":"http://felinemenace.org/advisories/bmv_advisory.txt","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-3279"},{"url":"https://github.com/advisories/GHSA-pr2v-gvjp-qp66"}],"sources":{"cve":[{"id":"CVE-2005-3279","description":"Stack-based buffer overflow in the vgasco_printf function in Jan Kybic BitMap Viewer (BMV) 1.2, when compiled with the M_UNIX flag and running setuid, allows local users to gain privileges via a long filename in the -b command line option.","status":"published","published":"2005-10-23T04:00:00Z","modified":"2024-09-16T19:25:06.743Z","updated_at":"2026-11-02T14:33:38.906611Z"}],"euvd":[{"id":"EUVD-2005-3278","description":"Stack-based buffer overflow in the vgasco_printf function in Jan Kybic BitMap Viewer (BMV) 1.2, when compiled with the M_UNIX flag and running setuid, allows local users to gain privileges via a long filename in the -b command line option.","status":"published","published":"2005-10-23T04:00:00Z","modified":"2024-09-16T19:25:06Z","updated_at":"2026-11-03T00:55:23.186812Z"}],"ghsa":[{"id":"GHSA-pr2v-gvjp-qp66","title":"Stack-based buffer overflow in the vgasco_printf function in Jan Kybic BitMap Viewer (BMV) 1.2,...","description":"Stack-based buffer overflow in the vgasco_printf function in Jan Kybic BitMap Viewer (BMV) 1.2, when compiled with the M_UNIX flag and running setuid, allows local users to gain privileges via a long filename in the -b command line option.","status":"published","published":"2022-05-01T02:16:18Z","modified":"2023-01-30T05:08:02Z","updated_at":"2026-11-02T14:47:47.270322Z"}],"nvd":[{"id":"CVE-2005-3279","description":"Stack-based buffer overflow in the vgasco_printf function in Jan Kybic BitMap Viewer (BMV) 1.2, when compiled with the M_UNIX flag and running setuid, allows local users to gain privileges via a long filename in the -b command line option.","status":"published","published":"2005-10-23T10:02:00Z","modified":"2026-06-16T22:16:38.343Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:57.365803Z"}]}}