Vulnerability Details CVE-2007-4444
Multiple buffer overflows in Image Space rFactor 1.250 and earlier allow remote attackers to execute arbitrary code via a packet with ID (1) 0x80 or (2) 0x88 to UDP port 34297, related to the buffer containing the server version number.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.23
EPSS Ranking 95.7%
CVSS Severity
CVSS v2 Score 7.5
References
- http://aluigi.org/poc/rfactorx.zip
- http://forum.racesimcentral.com/showthread.php?t=298659
- http://secunia.com/advisories/26526
- http://securityreason.com/securityalert/3037
- http://www.rfactor.net/?page=news_09-26_1255
- http://www.securityfocus.com/archive/1/477023/100/0/threaded
- http://www.securityfocus.com/archive/1/480591/100/200/threaded
- http://www.securityfocus.com/archive/1/480921/100/200/threaded
- http://www.securityfocus.com/bid/25358
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36093
- http://aluigi.org/poc/rfactorx.zip
- http://forum.racesimcentral.com/showthread.php?t=298659
- http://secunia.com/advisories/26526
- http://securityreason.com/securityalert/3037
- http://www.rfactor.net/?page=news_09-26_1255
- http://www.securityfocus.com/archive/1/477023/100/0/threaded
- http://www.securityfocus.com/archive/1/480591/100/200/threaded
- http://www.securityfocus.com/archive/1/480921/100/200/threaded
- http://www.securityfocus.com/bid/25358
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36093