Valve Steam权限获取漏洞

No description provided by source...

Valve Steam Privilege Acquisition Vulnerability

Valve Steam is a Linux-based operating system for living room gaming from the American company Valve. A security vulnerability exists in Valve Steam version 2.10.91.91, which originates when the program assigns weak permissions user: read/write to the Install folder. This vulnerability can be...

CVE-2015-7985

Valve Steam 2.10.91.91 uses weak permissions Users: read and write for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file...

Code injection

Valve Steam 2.10.91.91 uses weak permissions Users: read and write for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file...

CVE-2015-7985

Valve Steam 2.10.91.91 uses weak permissions Users: read and write for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file...

CVE-2015-7985

Valve Steam 2.10.91.91 uses weak permissions Users: read and write for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file...

CVE-2015-7985

Valve Steam 2.10.91.91 uses weak permissions Users: read and write for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file...

CVE-2015-7985

Valve Steam 2.10.91.91 has weak permissions on the Install folder (Users: read/write), enabling local privilege escalation via a trojan steam.exe. Affected component: Steam Install directory; root cause: improper file permissions. Impact: local privilege gain; exploitation details or in-wild stat...

CVE-2015-7985

Valve Steam 2.10.91.91 uses weak permissions Users: read and write for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file...

Valve Patches Password Reset Vulnerability in Steam

Valve Software has reportedly patched a vulnerability in the popular online Steam gaming platform that enabled account hijacking through its password reset mechanism. Kotaku, a popular blog among gamers, said that a number of prominent Steam accounts and Twitch streamers were stolen or accessed...

Valve Steam Denial of Service Vulnerability

Valve Steam is Valve's game integration platform, initially used as an immediate update for CS, HL2 and other Valve games, but has now evolved into a convenient and fast comprehensive download platform. A denial of service vulnerability exists in Valve Steam, which allows remote attackers to caus...

CVE-2015-4016

The client detection protocol in Valve Steam allows remote attackers to cause a denial of service process crash via a crafted response to a broadcast packet...

Design/Logic Flaw

The client detection protocol in Valve Steam allows remote attackers to cause a denial of service process crash via a crafted response to a broadcast packet...

CVE-2015-4016

The CVE-2015-4016 issue affects the Valve Steam client: the client-detection protocol is vulnerable to a crafted response to a broadcast packet, allowing remote attackers to crash the Steam process (DoS). The vulnerability is described across multiple sources (NVD entry and ZDI advisory) as a net...

CVE-2015-4016

The client detection protocol in Valve Steam allows remote attackers to cause a denial of service process crash via a crafted response to a broadcast packet...

Valve Steam Client Detection Denial of Service Vulnerability

This vulnerability allows remote attackers to execute a denial of service attack on vulnerable installations of Valve Steam. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Steam client detection protocol. By responding to a broadcast packet with ...

New Utility Decrypts Files Lost to TeslaCrypt Ransomware

Crypto-ransomware variants have enterprises on edge because of the threat of irreversibly damaged files. Some organizations, including most recently the Tewksbury, Ma., police department have gone as far as to pay hundreds of dollars in ransom for the recovery key. Some technology companies are...

CryptoLocker Variant Coming After Gamers

Gamers may soon be feeling the pain of crypto-ransomware. A variant of CryptoLocker is in the wild that goes after data files associated with 20 different online games, locking downloadable content in an attempt to target younger computer users. Researchers at Bromium today said an unnamed...

Gather Steam Server Information

This module uses the A2SINFO request to obtain information from a Steam server. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Gather Steam Server Information', 'Description' = %q This module...

Steam Software Denial of Service Vulnerability

No description provided by source. Exploit Title: Steam Cloud Denial of Service 0day Date: 06042011 Author: david.r.klein \x0agmail\x0acom Software Link: http://steampowered.com Version: Steam - Latest Tested on: Windows XP/2003, Windows7 CVE : NA Notes: Copy file to C:\Program...