CVE-2007-4425: Live For Speed

Medium severity, CVSS 6.0. EPSS: 2.7% chance of exploitation in the next 30 days.

Multiple buffer overflows in Live for Speed (LFS) demo, S1, and S2 allow remote authenticated users to (1) cause a denial of service (server crash) and probably execute arbitrary code via an ID 3 packet with a long nickname field, and (2) cause a denial of service (server crash) via an ID 10 packet containing a long string corresponding to an unavailable track.

Affected products

• Live For Speed Live For Speed: version demo only; version s1 only; version s2 only

Published 2007-08-20. Last modified 2026-06-16.