CVE-2005-0672: CA3DE

High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days.

Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via text strings that are not null terminated, which triggers a null dereference.

Affected products

• CA3DE CA3DE: any version

Published 2005-05-02. Last modified 2026-06-16.