Multiple buffer overflows in Image Space rFactor 1.250 and earlier allow remote attackers to execute arbitrary code via a packet with ID (1) 0x80 or (2) 0x88 to UDP port 34297, related to the buffer containing the server version number.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rfactor | Rfactor | 1150 (including) | 1150 (including) |
| Rfactor | Rfactor | 1250 (including) | 1250 (including) |