PT-2007-5450

CVE-2007-4257

·

Publicado

2007-08-08

·

Atualizado

2017-09-29

Descrição por

CVSS 2.0
6.8
Média
MétricasAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Live for Speed versions S1 and S2
Description The issue is related to multiple buffer overflows that can be exploited by user-assisted remote attackers to execute arbitrary code. This can be achieved through a .spr file, which is a single player replay file containing a long user name, or a .ply file containing a long number plate string.
Recommendations For Live for Speed versions S1 and S2, consider disabling the processing of .spr and .ply files until a patch is available to prevent the exploitation of buffer overflows. Restrict access to the functions that handle these file types to minimize the risk of arbitrary code execution.
Explorabilidade
Exploit
Correção
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾