217 matches found
Valve Half-Life 缓冲区错误漏洞
Valve Half-Life is a series of sci-fi first-person shooter games by Valve Corporation. A security vulnerability exists in Valve Half-Life, which is caused by a buffer overflow in hl.exe, which can be exploited by an attacker to execute arbitrary code and elevate privileges by supplying carefully...
CVE-2023-30382
The CVE-2023-30382 entry documents a buffer overflow in Valve Half-Life’s hl.exe (versions up to 5433873) that allows local attackers to execute arbitrary code and escalate privileges by supplying crafted parameters. The vulnerability is described consistently across multiple sources as a hl.exe ...
CVE-2023-30382
A buffer overflow in the component hl.exe of Valve Half-Life up to 5433873 allows attackers to execute arbitrary code and escalate privileges by supplying crafted parameters...
PT-2023-22667 · Valve · Half-Life
Name of the Vulnerable Software and Affected Versions: Valve Half-Life versions up to 5433873 Description: A buffer overflow in the component hl.exe allows attackers to execute arbitrary code and escalate privileges by supplying crafted parameters. Recommendations: For versions up to 5433873,...
CVE-2023-30382: Out-of-bounds Write
A buffer overflow in the component hl.exe of Valve Half-Life up to 5433873 allows attackers to execute arbitrary code and escalate privileges by supplying crafted parameters...
CVE-2023-30382
A buffer overflow in the component hl.exe of Valve Half-Life up to 5433873 allows attackers to execute arbitrary code and escalate privileges by supplying crafted parameters...
AMX Mod X 路径遍历漏洞
AMX Mod X is an open source Metamod plugin for Half Life 1 by AlliedModders. AMX Mod X has a path traversal vulnerability that originates in the function cmdVoteMap in the file plugins/adminvote.sma of the component Console Command Handler, which can be exploited by an attacker to cause path...
Counter-Strike CS:GO BuildID: 4937372 - Arbitrary Code Execution Exploit
Exploit Title: Source Engine CS:GO BuildID: 4937372 - Arbitrary Code Execution Date: 2020-04-27 Exploit Author: 0xEmma/BugByte/SebastianPC Vendor Homepage: https://www.valvesoftware.com/en/ Version: Source Engine, Tested on CS:GO BuildID: 4937372 TF2 BuildID: 4871679 Garry's Mod BuildID: 4803834...
Valve: Buffer overflow In hl.exe's launch -game argument allows an attacker to execute arbitrary code locally or from browser
Half Life 1 allows users to set various launch arguments when running the game from the command line, one of them is "-game" which specifies the game/mod to be launched. Documented here hl.exe -game The contents of this argument is copied via a call to strcpy onto the stack without any size...
Valve: Malformed .MDL triggers an Access Violation on GoldSRC (hl.exe)
A malformed player .MDL triggers an exploitable Access Violation on GoldSRC engine games Half-Life upon invocation, which could lead to remote code execution on a client. Crash Information FAILUREIDHASHSTRING: um:invalidpointerwriteexploitablec0000005hw.dll!createinterface Event Type: Exception...
Valve: [Half-Life 1] Malformed map name leads to memory corruption and code execution
A stack overflow takes place when map names with malformed names are listed which can be used to execute arbitrary code. I made a Proof of Concept that executes gnome-calculator on Linux. This was tested on Half Life 2018-08-29 on Linux, Ubuntu 18.04. To reproduce: - Extract the attached zip-file...
Valve Software Half-Life 1.1 Client Connection Routine Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/8299/info Half-Life Client has been reported prone to a remotely exploitable buffer overflow condition. The issue presents itself in the client connection routine, used by the client to negotiate a connection to the...
Half-Life Server 1.1/3.1 New Player Flood Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5076/info Half-Life is a popular game distributed and maintained by Valve Software. It includes features that allow users to game locally, or in distributed network environments. Valve Software also distributes a dedicate...
aGSM 2.35 Half-Life Server Info Response Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10989/info aGSM is reported prone to a remote buffer overflow vulnerability. The issue presents itself in the aGSM server information parsing routines for Half-Life game servers. Due to a lack of sufficient bounds checkin...
Valve Software Half-Life Dedicated Server 3.1/4.1 Information Disclosure/DOS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9070/info Half-Life dedicated server has been reported prone to an information disclosure vulnerability. This issue may also be exploited to deny service to legitimate users of the Half-Life dedicated server. The issue...
Half-Life CSTRIKE Server <= 1.6 (non steam) Denial of Service Exploit
No description provided by source. !/usr/bin/perl Server must not be running steam. /str0ke Half-Life engine remote DoS exploit bug found by Firestorm tested against cstrike 1.6 Windows build-in server, cstrike 1.6 linux dedicated server use IO::Socket; die usage: ./csdos host unless $ARGV0;...
Half-Life StatsMe 2.6.x Plug-in CMD_ARGV Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6575/info The Half-Life StatsMe plug-in is prone to an exploitable buffer overflow condition. This issue may be exploited by an attacker who can authenticate with the rcon-password of the Half-Life server to execute...
Half-Life StatsMe 2.6.x Plug-in MakeStats Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6578/info The Half-Life StatsMe plug-in is prone to an exploitable format string vulnerability. This issue may be exploited by an attacker who can authenticate with the rcon-password of the Half-Life server to execute...
Half-Life AdminMod 2.50 Plugin Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6580/info A format string vulnerability has been discovered in the Half-Life AdminMod plugin. The problem occurs in commands which call the selfmessage function, which is used by other functions to write a message to the...
Half-Life 1.1 Client Server Message Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6582/info It has been reported that the Half-Life client contains a format string vulnerability. When receiving messages from an administrator through the adminmod add-on package, the client does not properly handle input...