CVE-2007-4257
Live for Speed S1 and S2 - Buffer Overflow via Long User Name or Number Plate String
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-4257. PoCs published by n00b.
AI-analyzed exploit summary This exploit demonstrates a buffer overflow vulnerability in Live for Speed S2 (0.5X9) via a maliciously crafted .spr (replay) file. The exploit overwrites the EIP with a JMP ESP instruction and includes shellcode to achieve remote code execution.
Description
Multiple buffer overflows in Live for Speed (LFS) S1 and S2 allow user-assisted remote attackers to execute arbitrary code via (1) a .spr file (single player replay file) containing a long user name or (2) a .ply file containing a long number plate string, different vectors than CVE-2007-4140.
Exploits (2)
This exploit demonstrates a buffer overflow vulnerability in Live for Speed S2 (0.5X9) via a maliciously crafted .spr (replay) file. The exploit overwrites the EIP with a JMP ESP instruction and includes shellcode to achieve remote code execution.
This exploit demonstrates a buffer overflow vulnerability in Live for Speed S2 by crafting a malicious .ply file with an overly long number plate string. The exploit includes shellcode and leverages a JMP ESP instruction to achieve remote code execution when the victim loads the file.