Live for Speed Single Player Replay File Buffer Overflow Vulnerability

Bugtraq ID:	25208
Class:	Boundary Condition Error
CVE:	CVE-2007-4140
Remote:	Yes
Local:	No
Published:	Aug 06 2007 12:00AM
Updated:	May 07 2015 05:36PM
Credit:	n00b is credited with the discovery of this vulnerability.
Vulnerable:	Live for Speed Live for Speed S2 Live for Speed Live for Speed S1 Live for Speed Live for Speed Demo
Not Vulnerable:

Live for Speed Single Player Replay File Buffer Overflow Vulnerability

Live for Speed is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer.

An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the vulnerable application. Successfully exploiting this issue will result in a remote compromise of affected computers. Failed exploit attempts will likely result in denial-of-service conditions.

Live for Speed Single Player Replay File Buffer Overflow Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/25208.c

Live for Speed Single Player Replay File Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Live for Speed Single Player Replay File Buffer Overflow Vulnerability

References:

• Live for Speed Homepage (Live For Speed)