PT-2007-5450 · Lfs Team · Live For Speed

N00B · Published 2007-08-08 · Updated 2017-09-29 · CVE-2007-4257

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Live for Speed versions S1 and S2

Description The issue is related to multiple buffer overflows that can be exploited by user-assisted remote attackers to execute arbitrary code. This can be achieved through a .spr file, which is a single player replay file containing a long user name, or a .ply file containing a long number plate string.

Recommendations For Live for Speed versions S1 and S2, consider disabling the processing of .spr and .ply files until a patch is available to prevent the exploitation of buffer overflows. Restrict access to the functions that handle these file types to minimize the risk of arbitrary code execution.

Exploit

Fix

Related Identifiers

CVE-2007-4257

Affected Products

Live For Speed

References · 7

• 🔥 https://exploit-db.com/exploits/4263 · Exploit
• 🔥 https://exploit-db.com/exploits/4262 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4257 · Security Note
• http://securityfocus.com/bid/25208 · Note
• http://osvdb.org/46769 · Note
• http://osvdb.org/46768 · Note
• http://securityfocus.com/bid/25206 · Note