PT-2007-5626 · Image Space · Factor

Publicado 2007-08-21 · Atualizado 2018-10-15 · CVE-2007-4445

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Image Space rFactor versions 1.250 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in either a daemon crash or a UDP port block, via specially crafted packets. Specifically, the daemon crash can occur through packets with IDs 0x30, 0x38, and invalid 13-bit integers in packets with IDs 0x60 and 0x68. The UDP port block can be achieved through packets with IDs 0x20 and 0x28.

Recommendations For Image Space rFactor versions 1.250 and earlier, as a temporary workaround, consider restricting or disabling the handling of packets with IDs 0x20, 0x28, 0x30, 0x38, 0x60, and 0x68 until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2007-4445

Produtos afetados

Factor

Referências · 12

• 🔥 http://aluigi.org/poc/rfactorx.zip · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36094 · Nota
• http://securityfocus.com/archive/1/480921/100/200/threaded · Nota
• http://forum.racesimcentral.com/showthread.php?t=298659 · Nota
• http://securityfocus.com/bid/25358 · Nota
• http://secunia.com/advisories/26526 · Aviso do Fabricante
• http://securityreason.com/securityalert/3037 · Nota
• http://rfactor.net/?page=news_09-26_1255 · Nota
• http://securityfocus.com/archive/1/480591/100/200/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4445 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36095 · Nota
• http://securityfocus.com/archive/1/477023/100/0/threaded · Nota