CVE-2005-3488

Scorched 3D 39.1 (bf) and earlier - Denial of Service via Negative numplayers Value

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-3488. PoCs published by Luigi Auriemma.

AI-analyzed exploit summary This is a functional exploit for CVE-2005-3486 targeting Scorched 3D <= 39.1. It includes multiple attack vectors such as format string vulnerabilities, buffer overflows, and server freeze via negative numplayers.

Description

Scorched 3D 39.1 (bf) and earlier allows remote attackers to cause a denial of service (long loop and server hang) via a negative numplayers value that bypasses a signed check in ServerConnectHandler.cpp.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Luigi Auriemma · cdoswindows

https://www.exploit-db.com/exploits/1285

View Code ZIP pw:eip

This is a functional exploit for CVE-2005-3486 targeting Scorched 3D <= 39.1. It includes multiple attack vectors such as format string vulnerabilities, buffer overflows, and server freeze via negative numplayers.

Classification

Working Poc 95%

Attack Type

Rce | Dos

Complexity

Moderate

Reliability

Reliable

Target: Scorched 3D <= 39.1

No auth needed

Prerequisites: Network access to the target server · UDP/TCP connectivity to the target port

MITRE ATT&CK