PT-2007-5450

CVE-2007-4257

·

تاريخ النشر

2007-08-08

·

تاريخ التحديث

2017-09-29

الوصف من

CVSS 2.0
6.8
متوسطة
المقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Live for Speed versions S1 and S2
Description The issue is related to multiple buffer overflows that can be exploited by user-assisted remote attackers to execute arbitrary code. This can be achieved through a .spr file, which is a single player replay file containing a long user name, or a .ply file containing a long number plate string.
Recommendations For Live for Speed versions S1 and S2, consider disabling the processing of .spr and .ply files until a patch is available to prevent the exploitation of buffer overflows. Restrict access to the functions that handle these file types to minimize the risk of arbitrary code execution.
قابلية الاستغلال
استغلال
إصلاح
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾