Live for Speed (LFS) S1 and S2 allows remote attackers to cause a denial of service (server crash) via (1) a certain 0x00 byte in a pre-login ID 3 packet, which triggers a NULL dereference; or (2) a pre-login ID 5 packet that lacks certain strings, which triggers an invalid pointer dereference.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2007-08-20 11:17
Updated : 2018-10-15 14:35
NVD link : CVE-2007-4426
Mitre link : CVE-2007-4426
JSON object : View
CWE
Products Affected
live_for_speed
- live_for_speed


