Steam vulnerabilities allowed remote take over of users’ computers

By Waqas In total, CheckPoint researchers found 4 vulnerabilities all allowing attackers to harm Steam and those using 3rd party game server. This is a post from HackRead.com Read the original post: Steam vulnerabilities allowed remote take over of users computers...

Valve's Steam Server Bugs Could've Let Hackers Hijack Online Games

Critical flaws in a core networking library powering Valve's online gaming functionality could have allowed malicious actors to remotely crash games and even take control over affected third-party game servers. "An attacker could remotely crash an opponent's game client to force a win or even...

Ta-da Accelerator Denial of Service Vulnerability

Ta da Accelerator is a game gas pedal software. A denial of service vulnerability exists in DaDa Accelerator version 5.6.19.816. An attacker could exploit the vulnerability through a specially crafted program to cause a computer crash...

Fighting Fish PC client suffers from dll hijacking vulnerability

Douyu PC client is a game video live streaming software. A dll hijacking vulnerability exists in Douyu PC client. An attacker can exploit this vulnerability to execute malicious code...

CVE-2020-23735

In Saibo Cyber Game Accelerator 3.7.9 there is a local privilege escalation vulnerability. Attackers can use the constructed program to increase user privileges...

Privilege escalation

In Saibo Cyber Game Accelerator 3.7.9 there is a local privilege escalation vulnerability. Attackers can use the constructed program to increase user privileges...

CVE-2020-23735

Technical details on CVE-2020-23735 are not publicly provided in the supplied documents; no concrete exploit specifics, affected versions, or fixes are present. Monitor for updates.

CVE-2020-23735

In Saibo Cyber Game Accelerator 3.7.9 there is a local privilege escalation vulnerability. Attackers can use the constructed program to increase user privileges...

CVE-2020-6017

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNPReceiveUnreliableSegment when configured to support plain-text messages, leading to a Heap-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code...

CVE-2020-6017

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNPReceiveUnreliableSegment when configured to support plain-text messages, leading to a Heap-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code...

CVE-2020-6017

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNPReceiveUnreliableSegment when configured to support plain-text messages, leading to a Heap-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code...

Heap overflow

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNPReceiveUnreliableSegment when configured to support plain-text messages, leading to a Heap-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code...

CVE-2020-6017

Valve’s Game Networking Sockets (Steam Sockets) prior to v1.2.0 is affected by CVE-2020-6017 due to SNP_ReceiveUnreliableSegment() mishandling long unreliable segments when plain-text messages are enabled, causing a heap-based buffer overflow that can lead to memory corruption and potential remot...

Valvesoftware GameNetworkingSockets Buffer Error Vulnerability

Valvesoftware GameNetworkingSockets is a transport layer support software for game delivery data from Valvesoftware USA. A buffer error vulnerability exists in Valve Game Networking Sockets versions prior to 1.2.0, which stems from a network socket incorrectly handling long unreliable segments in...

CVE-2020-6018

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted messages in function AESGCMDecryptContext::Decrypt when compiled using libsodium, leading to a Stack-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code execution...

CVE-2020-6018

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted messages in function AESGCMDecryptContext::Decrypt when compiled using libsodium, leading to a Stack-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code execution...

Stack overflow

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted messages in function AESGCMDecryptContext::Decrypt when compiled using libsodium, leading to a Stack-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code execution...

CVE-2020-6018

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted messages in function AESGCMDecryptContext::Decrypt when compiled using libsodium, leading to a Stack-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code execution...

CVE-2020-6018

CVE-2020-6018 affects Valve's Game Networking Sockets

CVE-2020-6018

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted messages in function AESGCMDecryptContext::Decrypt when compiled using libsodium, leading to a Stack-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code execution...