Dogs Of War Vu

Sim/Strategy/War => Games Discussion => Topic started by: Asid on June 01, 2018, 11:27:27 AM

Title: A Remote Code Execution Vulnerability in the Steam Client
Post by: Asid on June 01, 2018, 11:27:27 AM

A Remote Code Execution Vulnerability in the Steam Client

https://youtu.be/0QaozC8S0Aw

Context Information Security
Published on May 30, 2018

This video demonstrates an attacker remotely launching the Windows calculator app on a fully patched version of Windows 10.
Read the full blog post on the corresponding bug which had existed in the Steam client for at least the last ten years, here: https://www.contextis.com/blog/frag-grenade-a-remote-code-execution-vulnerability-in-the-steam-client

STEAM has now patched this vulnerability.