PT-2007-5450 · Lfs Team · Live For Speed

N00B · Publicado 2007-08-08 · Atualizado 2017-09-29 · CVE-2007-4257

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Live for Speed versions S1 and S2

Description The issue is related to multiple buffer overflows that can be exploited by user-assisted remote attackers to execute arbitrary code. This can be achieved through a .spr file, which is a single player replay file containing a long user name, or a .ply file containing a long number plate string.

Recommendations For Live for Speed versions S1 and S2, consider disabling the processing of .spr and .ply files until a patch is available to prevent the exploitation of buffer overflows. Restrict access to the functions that handle these file types to minimize the risk of arbitrary code execution.

Exploit

Correção

Identificadores relacionados

CVE-2007-4257

Produtos afetados

Live For Speed

Referências · 7

• 🔥 https://exploit-db.com/exploits/4263 · Exploit
• 🔥 https://exploit-db.com/exploits/4262 · Exploit
• http://securityfocus.com/bid/25208 · Nota
• http://osvdb.org/46769 · Nota
• http://osvdb.org/46768 · Nota
• http://securityfocus.com/bid/25206 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4257 · Nota de Segurança