PT-2007-5336
CVE-2007-4140
·
تاريخ النشر
2007-08-03
·
تاريخ التحديث
2017-09-29
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Live for Speed (LFS) S2 ALPHA PATCH 0.5x
Description
The issue allows user-assisted remote attackers to execute arbitrary code via a .mpr file (replay file) that contains a long car name. This is due to a buffer overflow.
Recommendations
For Live for Speed (LFS) S2 ALPHA PATCH 0.5x, avoid using .mpr files with long car names until a patch is available. As a temporary workaround, consider restricting the use of .mpr files or validating the length of car names in these files to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾