CVE-2007-4257

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

4.77%

Published

Aug 8, 2007

Modified

Jun 16, 2026

Public PoC / Exploit (3)

All weaponized →

TrickestTrickest PoC index Exploit-DBLive for Speed S1/S2/Demo - '.ply' Local Buffer Overflow Exploit-DBLive for Speed S1/S2/Demo - '.spr' Local Buffer Overflow

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple buffer overflows in Live for Speed (LFS) S1 and S2 allow user-assisted remote attackers to execute arbitrary code via (1) a .spr file (single player replay file) containing a long user name or (2) a .ply file containing a long number plate string, different vectors than CVE-2007-4140.

Affected Products (2)

lfs · live_for_speedvulnerable

References (12)

http://osvdb.org/46768

http://osvdb.org/46769

http://www.securityfocus.com/bid/25206

http://www.securityfocus.com/bid/25208

https://www.exploit-db.com/exploits/4262

https://www.exploit-db.com/exploits/4263

http://osvdb.org/46768

http://osvdb.org/46769

http://www.securityfocus.com/bid/25206

http://www.securityfocus.com/bid/25208

KEV Catalog EPSS Scores Vendors All CVEs