CVE-2005-3964: integrated_computer_solutions openmotif
Vulnerability summary
CVE-2005-3964 is a high (CVSS 7.5) vulnerability in integrated_computer_solutions openmotif. EPSS estimates a 4.55% chance of exploitation in the next 30 days, higher than 91.6% of scored vulnerabilities.
Not severe (CVSS 7.5, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 2Timeline
- 02-12-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple buffer overflows in libUil (libUil.so) in OpenMotif 2.2.3, and possibly other versions, allows attackers to execute arbitrary code via the (1) diag_issue_diagnostic function in UilDiags.c and (2) open_source_file function in UilSrcSrc.c.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.55%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
No change 0.00 pp
From 4.55% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Redhat5 products
- openmotif< 0:2.2.3-5.RHEL3.3 | < 0:2.2.3-10.RHEL4.1
- openmotif-debuginfo< 0:2.2.3-5.RHEL3.3 | < 0:2.2.3-10.RHEL4.1
- openmotif-devel< 0:2.2.3-5.RHEL3.3 | < 0:2.2.3-10.RHEL4.1
- openmotif21< 0:2.1.30-9.RHEL3.7 | < 0:2.1.30-11.RHEL4.5
- openmotif21-debuginfo< 0:2.1.30-9.RHEL3.7 | < 0:2.1.30-11.RHEL4.5
Integrated_computer_solutions1 product
- openmotif2.2.3
2 vendors · 6 products
References
19 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9393VDB EntrySignatureX Refsource OVAL
