CVE-2005-0671

Carsten's 3D Engine <March 2004 - RCE

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-0671. PoCs published by Luigi Auriemma.

AI-analyzed exploit summary The provided text is a vulnerability writeup for CVE-2005-0671, describing format string and denial-of-service vulnerabilities in Ca3DE versions before March 2004. It does not contain exploit code but references a binary exploit available elsewhere.

Description

Format string vulnerability in Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via format string specifiers in a command.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Luigi Auriemma · textremotemultiple

https://www.exploit-db.com/exploits/25190

View Code ZIP pw:eip

The provided text is a vulnerability writeup for CVE-2005-0671, describing format string and denial-of-service vulnerabilities in Ca3DE versions before March 2004. It does not contain exploit code but references a binary exploit available elsewhere.

Classification

Writeup 90%

Attack Type

Dos | Rce

Complexity

Moderate

Reliability

Theoretical

Target: Ca3DE (versions before March 2004)

No auth needed

Prerequisites: Network access to the vulnerable Ca3DE server

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1499 - Endpoint Denial of Service

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4

Core References

Exploit, Patch, Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/14483

Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/12727

Vendor Advisory vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1013361

Vendor Advisory x_refsource_misc

http://aluigi.altervista.org/adv/ca3dex-adv.txt

Scores

EPSS 0.0496

EPSS Percentile 91.1%

Details

Status published

Products (1)

ca3de/ca3de < march_2004

Published Mar 03, 2005

Tracked Since Feb 18, 2026