CVE-2005-3491

FlatFrag 0.3 - Remote Code Execution via Receiver Function Buffer Overflow

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-3491.

AI-analyzed exploit summary This exploit demonstrates two vulnerabilities in FlatFrag <= 0.3: a buffer overflow and a NULL pointer dereference. It sends crafted UDP packets to trigger the vulnerabilities and checks if the server crashes.

Description

Multiple buffer overflows in the receiver function in loop.c in FlatFrag 0.3 and earlier allow remote attackers to execute arbitrary code via the (1) version, (2) name, and (3) model fields.

Exploits (1)

exploitdb WORKING POC

cdoswindows

https://www.exploit-db.com/exploits/1283

View Code ZIP pw:eip

This exploit demonstrates two vulnerabilities in FlatFrag <= 0.3: a buffer overflow and a NULL pointer dereference. It sends crafted UDP packets to trigger the vulnerabilities and checks if the server crashes.

Classification

Working Poc 100%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: FlatFrag <= 0.3

No auth needed

Prerequisites: Network access to the target server

MITRE ATT&CK