546 matches found
Code injection
Valve Steam 2.10.91.91 uses weak permissions Users: read and write for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file...
CVE-2015-7985
Valve Steam 2.10.91.91 uses weak permissions Users: read and write for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file...
CVE-2015-7985
Removed by vendor...
CVE-2015-7985
Valve Steam 2.10.91.91 has weak permissions on the Install folder (Users: read/write), enabling local privilege escalation via a trojan steam.exe. Affected component: Steam Install directory; root cause: improper file permissions. Impact: local privilege gain; exploitation details or in-wild stat...
Valve Patches Password Reset Vulnerability in Steam
Valve Software has reportedly patched a vulnerability in the popular online Steam gaming platform that enabled account hijacking through its password reset mechanism. Kotaku, a popular blog among gamers, said that a number of prominent Steam accounts and Twitch streamers were stolen or accessed...
Valve Steam Denial of Service Vulnerability
Valve Steam is Valve's game integration platform, initially used as an immediate update for CS, HL2 and other Valve games, but has now evolved into a convenient and fast comprehensive download platform. A denial of service vulnerability exists in Valve Steam, which allows remote attackers to caus...
Design/Logic Flaw
The client detection protocol in Valve Steam allows remote attackers to cause a denial of service process crash via a crafted response to a broadcast packet...
CVE-2015-4016
The client detection protocol in Valve Steam allows remote attackers to cause a denial of service process crash via a crafted response to a broadcast packet...
CVE-2015-4016
The CVE-2015-4016 issue affects the Valve Steam client: the client-detection protocol is vulnerable to a crafted response to a broadcast packet, allowing remote attackers to crash the Steam process (DoS). The vulnerability is described across multiple sources (NVD entry and ZDI advisory) as a net...
CVE-2015-4016
The client detection protocol in Valve Steam allows remote attackers to cause a denial of service process crash via a crafted response to a broadcast packet...
CVE-2014-9206
Stack-based buffer overflow in Device Type Manager DTM 3.1.6 and earlier for Schneider Electric Invensys SRD Control Valve Positioner devices 960 and 991 allows local users to gain privileges via a malformed DLL file...
CVE-2014-9206
Stack-based buffer overflow in Device Type Manager DTM 3.1.6 and earlier for Schneider Electric Invensys SRD Control Valve Positioner devices 960 and 991 allows local users to gain privileges via a malformed DLL file...
CVE-2014-9206
The vulnerability CVE-2014-9206 affects Schneider Electric Invensys SRD Control Valve Positioner DTM software (DTM 3.1.6 and earlier) used with SRD 960/991. It is a stack-based buffer overflow in a DLL that could allow a local attacker to gain privileges by loading a malformed DLL. Connected advi...
Valve Software Half-Life 1.1 Client Connection Routine Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/8299/info Half-Life Client has been reported prone to a remotely exploitable buffer overflow condition. The issue presents itself in the client connection routine, used by the client to negotiate a connection to the...
Half-Life Server 1.1/3.1 New Player Flood Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5076/info Half-Life is a popular game distributed and maintained by Valve Software. It includes features that allow users to game locally, or in distributed network environments. Valve Software also distributes a dedicate...
Valve Software Half-Life Server 3.1.1.0 - Multiplayer Request Buffer Overflow
No description provided by source...
Valve Software Source Engine - Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36061/info Source Engine is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. An attacker may...
Valve Software Half-Life 1.1 Client Connection Routine Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/8299/info Half-Life Client has been reported prone to a remotely exploitable buffer overflow condition. The issue presents itself in the client connection routine, used by the client to negotiate a connection to the...
Valve Steam Client Application 1559/1559 - Local Privilege Escalation
No description provided by source. Valve Steam Client Application v1559/1559 Local Privilege Escalation Vendor: Valve Corporation Product web page: http://www.steampowered.com Affected version: Built: Jun 1, 2011 at 15:31:24 Steam API: v010 Steam package versions 1559 / 1559 File version:...
CVE-2013-7128
Valve Bug Reporter in the valve-bugreporter package 2.10+bsos1 in Valve SteamOS Beta stores cleartext credentials in a .valve-bugreporter.cfg file upon a Remember Credentials action, which allows local users to obtain sensitive information by reading this file...