Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-0105. PoCs published by Ulf Harnhammar.
AI-analyzed exploit summary This exploit leverages a local format string vulnerability in typespeed to achieve privilege escalation by overwriting a target address with a crafted format string and executing shellcode via environment variables.
Description
Unknown vulnerability in typespeed 0.4.1 and earlier allows local users to gain privileges.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Ulf Harnhammar · clocallinux
https://www.exploit-db.com/exploits/25106
This exploit leverages a local format string vulnerability in typespeed to achieve privilege escalation by overwriting a target address with a crafted format string and executing shellcode via environment variables.
Classification
Working Poc 95%
Attack Type
Lpe
Complexity
Moderate
Reliability
Reliable
Target:
typespeed (version not specified)
No auth needed
Prerequisites:
Local access to the target system · typespeed installed · Ability to compile and run the provided helper binary 'enva'
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (1)
Core 1
Core References
Patch, Vendor Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2005/dsa-684
Scores
EPSS
0.0071
EPSS Percentile
48.7%
Details
Status
published
Products (1)
typespeed/typespeed
0.4.1
Published
Feb 16, 2005
Tracked Since
Feb 18, 2026