CVE-2005-3487
Scorched 3D 39.1 (bf) and earlier - Remote Code Execution via Multiple Buffer Overflows
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-3487.
AI-analyzed exploit summary This is a functional exploit for CVE-2005-3487 targeting Scorched 3D <= 39.1. It includes multiple attack vectors such as format string vulnerabilities, buffer overflows, and server freeze via negative numplayers. The code is well-structured and demonstrates the vulnerabilities effectively.
Description
Multiple buffer overflows in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary code via various (1) GLConsole::addLine, (2) ServerCommon::sendString, (3) ServerCommon::serverLog functions, (4) a long command that is not properly handled in ComsMessageHandler.cpp when generating an error message, (5) a long UniqueID value in Logger.cpp, and possibly other unspecified vectors.
Exploits (1)
This is a functional exploit for CVE-2005-3487 targeting Scorched 3D <= 39.1. It includes multiple attack vectors such as format string vulnerabilities, buffer overflows, and server freeze via negative numplayers. The code is well-structured and demonstrates the vulnerabilities effectively.