CVE-2007-4257

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-08-08 · updated 2026-06-16

Description

Multiple buffer overflows in Live for Speed (LFS) S1 and S2 allow user-assisted remote attackers to execute arbitrary code via (1) a .spr file (single player replay file) containing a long user name or (2) a .ply file containing a long number plate string, different vectors than CVE-2007-4140.

Affected products

Lfs Live For Speed: sp1, sp2

References

http://osvdb.org/46768
http://osvdb.org/46769
http://www.securityfocus.com/bid/25206
http://www.securityfocus.com/bid/25208
https://www.exploit-db.com/exploits/4262
https://www.exploit-db.com/exploits/4263
http://osvdb.org/46768
http://osvdb.org/46769
http://www.securityfocus.com/bid/25206
http://www.securityfocus.com/bid/25208
https://www.exploit-db.com/exploits/4262
https://www.exploit-db.com/exploits/4263

Get alerted when CVE-2007-4257 or the next vulnerability affects your stack