← Back

Flatfrag

flatfrag

Vendor: Johannes F. Kuhlmann • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Johannes F. Kuhlmann
1Flatfrag
Apr 16, 2026
Nov 4, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
FlatFrag 0.3 and earlier allows remote attackers to cause a denial of service (crash) by sending an NT_CONN_OK command from a client that is not connected, which triggers a null dereference.
1Johannes F. Kuhlmann
1Flatfrag
Apr 16, 2026
Nov 4, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple buffer overflows in the receiver function in loop.c in FlatFrag 0.3 and earlier allow remote attackers to execute arbitrary code via the (1) version, (2) name, and (3) model fields.