{"id":"CVE-2005-3491","aliases":["EUVD-2005-3490","GHSA-rjc4-4vrj-53rj"],"status":"published","title":"Multiple buffer overflows in the receiver function in loop.c in FlatFrag 0.3 and earlier allow...","description":"Multiple buffer overflows in the receiver function in loop.c in FlatFrag 0.3 and earlier allow remote attackers to execute arbitrary code via the (1) version, (2) name, and (3) model fields.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04921,"percentile":0.92176,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2005-11-04T00:00:00Z","modified":"2026-06-16T22:17:03Z","exploits":[{"source":"exploitdb","id":"EDB-1283","title":"FlatFrag 0.3 - Buffer Overflow (Denial of Service) (PoC)","type":"dos","platform":"windows","date":"2005-11-02","verified":true,"url":"https://www.exploit-db.com/exploits/1283"}],"products":[{"vendor":"johannes_f._kuhlmann","product":"flatfrag"}],"references":[{"url":"http://aluigi.altervista.org/adv/flatfragz-adv.txt","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://www.securityfocus.com/bid/15287","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://www.securityfocus.com/archive/1/415636/30/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.osvdb.org/20769","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://marc.info/?l=full-disclosure\u0026m=113096078606274\u0026w=2","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-3491"},{"url":"https://github.com/advisories/GHSA-rjc4-4vrj-53rj"}],"sources":{"cve":[{"id":"CVE-2005-3491","description":"Multiple buffer overflows in the receiver function in loop.c in FlatFrag 0.3 and earlier allow remote attackers to execute arbitrary code via the (1) version, (2) name, and (3) model fields.","status":"published","published":"2005-11-04T00:00:00Z","modified":"2024-08-07T23:17:22.391Z","updated_at":"2026-11-02T14:33:38.906611Z"}],"euvd":[{"id":"EUVD-2005-3490","description":"Multiple buffer overflows in the receiver function in loop.c in FlatFrag 0.3 and earlier allow remote attackers to execute arbitrary code via the (1) version, (2) name, and (3) model fields.","status":"published","published":"2005-11-04T00:00:00Z","modified":"2024-08-07T23:17:22Z","updated_at":"2026-11-03T01:15:26.733503Z"}],"ghsa":[{"id":"GHSA-rjc4-4vrj-53rj","title":"Multiple buffer overflows in the receiver function in loop.c in FlatFrag 0.3 and earlier allow...","description":"Multiple buffer overflows in the receiver function in loop.c in FlatFrag 0.3 and earlier allow remote attackers to execute arbitrary code via the (1) version, (2) name, and (3) model fields.","status":"published","published":"2022-05-01T02:18:28Z","modified":"2023-01-30T05:08:11Z","updated_at":"2026-11-02T14:47:48.188889Z"}],"nvd":[{"id":"CVE-2005-3491","description":"Multiple buffer overflows in the receiver function in loop.c in FlatFrag 0.3 and earlier allow remote attackers to execute arbitrary code via the (1) version, (2) name, and (3) model fields.","status":"published","published":"2005-11-04T00:02:00Z","modified":"2026-06-16T22:17:03.86Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:57.365803Z"}]}}