CVE-2007-4445
Image Space rFactor 1.250 and earlier allows remote attackers to cause a denial of service ...
CVE-2007-4445 is a high vulnerability (CVSS 7.5) in Rfactor, published August 21, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.29%, the 83rd percentile. No source names a fixed version.
Image Space rFactor 1.250 and earlier allows remote attackers to cause a denial of service (daemon crash) via (1) an ID 0x30 packet, (2) an ID 0x38 packet, and an invalid 13-bit integer in (3) an ID 0x60 packet and (4) an ID 0x68 packet; and a denial of service (UDP port block) via (5) an ID 0x20 packet and (6) an ID 0x28 packet.
Exploit likelihood
What each source reports
NVD Score used
Image Space rFactor 1.250 and earlier allows remote attackers to cause a denial of service (daemon crash) via (1) an ID 0x30 packet, (2) an ID 0x38 packet, and an invalid 13-bit integer in (3) an ID 0x60 packet and (4) an ID 0x68 packet; and a denial of service (UDP port block) via (5) an ID 0x20 packet and (6) an ID 0x28 packet.
- Record
CVE-2007-4445- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Image Space rFactor 1.250 and earlier allows remote attackers to cause a denial of service (daemon crash) via (1) an ID 0x30 packet, (2) an ID 0x38 packet, and an invalid 13-bit integer in (3) an ID 0x60 packet and (4) an ID 0x68 packet; and a denial of service (UDP port block) via (5) an ID 0x20 packet and (6) an ID 0x28 packet.
- Record
CVE-2007-4445- Updated
- 2026-11-02
EUVDEUVD-2007-4428 No score
Image Space rFactor 1.250 and earlier allows remote attackers to cause a denial of service (daemon crash) via (1) an ID 0x30 packet, (2) an ID 0x38 packet, and an invalid 13-bit integer in (3) an ID 0x60 packet and (4) an ID 0x68 packet; and a denial of service (UDP port block) via (5) an ID 0x20 packet and (6) an ID 0x28 packet.
- Record
EUVD-2007-4428- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v689-7vgf-r3r8 No score
Image Space rFactor 1.250 and earlier allows remote attackers to cause a denial of service ...
Image Space rFactor 1.250 and earlier allows remote attackers to cause a denial of service (daemon crash) via (1) an ID 0x30 packet, (2) an ID 0x38 packet, and an invalid 13-bit integer in (3) an ID 0x60 packet and (4) an ID 0x68 packet; and a denial of service (UDP port block) via (5) an ID 0x20 packet and (6) an ID 0x28 packet.
- Record
GHSA-v689-7vgf-r3r8- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | aliases, references, title | GitHub Advisories |
| 2026-11-02 | created | CVE List, NVD |
References
forum.racesimcentral.com/showthread.php?t=298659
securityfocus.com/bid/25358
securityreason.com/securityalert/3037
aluigi.org/poc/rfactorx.zip
rfactor.net?page=news_09-26_1255
exchange.xforce.ibmcloud.com/vulnerabilities/36095
Show 7 moreShow less
secunia.com/advisories/26526
nvd.nist.gov/vuln/detail/CVE-2007-4445
github.com/advisories/GHSA-v689-7vgf-r3r8