{"api_version":"1","generated_at":"2026-07-23T09:16:17+00:00","cve":"CVE-2005-3491","urls":{"html":"https://cve.report/CVE-2005-3491","api":"https://cve.report/api/cve/CVE-2005-3491.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-3491","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-3491"},"summary":{"title":"CVE-2005-3491","description":"Multiple buffer overflows in the receiver function in loop.c in FlatFrag 0.3 and earlier allow remote attackers to execute arbitrary code via the (1) version, (2) name, and (3) model fields.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-11-04 00:02:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/bid/15287","name":"http://www.securityfocus.com/bid/15287","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Johannes F. Kuhlmann FlatFrag Multiple Remote Buffer Overflow And Denial Of Service Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://aluigi.altervista.org/adv/flatfragz-adv.txt","name":"http://aluigi.altervista.org/adv/flatfragz-adv.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/415636/30/0/threaded","name":"http://www.securityfocus.com/archive/1/415636/30/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=full-disclosure&m=113096078606274&w=2","name":"http://marc.info/?l=full-disclosure&m=113096078606274&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'[Full-disclosure] Buffer-overflow and crash in FlatFrag 0.3' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/20769","name":"http://www.osvdb.org/20769","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-3491","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-3491","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"3491","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"johannes_f._kuhlmann","cpe5":"flatfrag","cpe6":"0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T23:17:22.391Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://aluigi.altervista.org/adv/flatfragz-adv.txt"},{"name":"15287","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/15287"},{"name":"20051102 Buffer-overflow and crash in FlatFrag 0.3","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/415636/30/0/threaded"},{"name":"20769","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/20769"},{"name":"20051102 Buffer-overflow and crash in FlatFrag 0.3","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://marc.info/?l=full-disclosure&m=113096078606274&w=2"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-11-02T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple buffer overflows in the receiver function in loop.c in FlatFrag 0.3 and earlier allow remote attackers to execute arbitrary code via the (1) version, (2) name, and (3) model fields."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-19T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://aluigi.altervista.org/adv/flatfragz-adv.txt"},{"name":"15287","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/15287"},{"name":"20051102 Buffer-overflow and crash in FlatFrag 0.3","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/415636/30/0/threaded"},{"name":"20769","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/20769"},{"name":"20051102 Buffer-overflow and crash in FlatFrag 0.3","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://marc.info/?l=full-disclosure&m=113096078606274&w=2"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-3491","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple buffer overflows in the receiver function in loop.c in FlatFrag 0.3 and earlier allow remote attackers to execute arbitrary code via the (1) version, (2) name, and (3) model fields."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://aluigi.altervista.org/adv/flatfragz-adv.txt","refsource":"MISC","url":"http://aluigi.altervista.org/adv/flatfragz-adv.txt"},{"name":"15287","refsource":"BID","url":"http://www.securityfocus.com/bid/15287"},{"name":"20051102 Buffer-overflow and crash in FlatFrag 0.3","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/415636/30/0/threaded"},{"name":"20769","refsource":"OSVDB","url":"http://www.osvdb.org/20769"},{"name":"20051102 Buffer-overflow and crash in FlatFrag 0.3","refsource":"FULLDISC","url":"http://marc.info/?l=full-disclosure&m=113096078606274&w=2"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-3491","datePublished":"2005-11-04T00:00:00.000Z","dateReserved":"2005-11-03T00:00:00.000Z","dateUpdated":"2024-08-07T23:17:22.391Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-11-04 00:02:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:johannes_f._kuhlmann:flatfrag:0.3:*:*:*:*:*:*:*","matchCriteriaId":"0BF7F25D-0B89-434B-AE63-E9CD67F6CB7A"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"3491","Ordinal":"1","Title":"CVE-2005-3491","CVE":"CVE-2005-3491","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"3491","Ordinal":"1","NoteData":"Multiple buffer overflows in the receiver function in loop.c in FlatFrag 0.3 and earlier allow remote attackers to execute arbitrary code via the (1) version, (2) name, and (3) model fields.","Type":"Description","Title":"CVE-2005-3491"},{"CveYear":"2005","CveId":"3491","Ordinal":"2","NoteData":"2005-11-03","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"3491","Ordinal":"3","NoteData":"2018-10-19","Type":"Other","Title":"Modified"}]}}}