Valve

Valve 的公开漏洞报告、类别分布与常见资产。

攻击面

弱点类别分布

• 内存破坏28
• 访问控制10
• 代码执行10
• 信息泄露10
• 跨站脚本8
• 业务逻辑3
• 身份认证3
• 不安全的直接对象引用2
• SQL 注入2
• 路径遍历2
• 服务端请求伪造1
• 开放重定向1
• 跨站请求伪造1
• 其他弱点1

主要弱点

• 经典缓冲区溢出14
• 访问控制缺陷（通用）8
• 信息泄露7
• 栈溢出6
• 存储型 XSS4
• 越界读3
• 反射型 XSS3
• 命令注入（通用）3
• 业务逻辑错误3
• SQL 注入2

常见资产

• hl.exeDOWNLOADABLE_EXECUTABLES · 19
• steamcommunity.comURL · 13
• partner.steamgames.comURL · 11
• steam.exeDOWNLOADABLE_EXECUTABLES · 8
• *.exeDOWNLOADABLE_EXECUTABLES · 7
• csgo.exeDOWNLOADABLE_EXECUTABLES · 7
• www.dota2.comURL · 3
• partner.steampowered.comURL · 3
• store.steampowered.comURL · 3
• api.steampowered.comURL · 2

高票报告

当前状态 80 份 · 全部 82

1. 1,289
   RCE on Steam Client via buffer overflow in Server Info内存破坏 · 2019-03-16 · 严重
   $0经典缓冲区溢出
2. 638
   Getting all the CD keys of any game访问控制 · 2018-11-01 · 严重
   $20,000访问控制缺陷（通用）
3. 499
   XSS in steam react chat client跨站脚本 · 2019-01-08 · 严重
   $7,500存储型 XSS
4. 443
   Modify in-flight data to payment provider Smart2Pay业务逻辑 · 2021-08-11 · 严重
   $7,500业务逻辑错误
5. 420
   Panorama UI XSS leads to Remote Code Execution via Kick/Disconnect Message代码执行 · 2019-10-09 · 严重
   $0代码注入
6. 410
   SQL Injection in report_xml.php through countryFilter[] parameterSQL 注入 · 2018-07-28 · 严重
   $25,000SQL 注入
7. 321
   Malformed .BMP file in Counter-Strike 1.6 may cause shellcode injection内存破坏 · 2020-02-28 · 高危
   $0经典缓冲区溢出
8. 268
   Malformed NAV file leads to buffer overflow and code execution in Left4Dead2.exe内存破坏 · 2020-03-26 · 严重
   $10,000经典缓冲区溢出
9. 229
   Unchecked weapon id in WeaponList message parser on client leads to RCE内存破坏 · 2019-09-18 · 严重
   $3,000Array Index Underflow
10. 219
    OOB reads in network message handlers leads to RCE内存破坏 · 2021-05-04 · 严重
    $7,500越界读
11. 209
    RCE on CS:GO client using unsanitized entity ID in EntityMsg message内存破坏 · 2021-05-28 · 严重
    $9,000越界读
12. 196
    Buffer overrun in Steam SILK voice decoder内存破坏 · 2021-09-14 · 严重
    $7,500经典缓冲区溢出
13. 173
    [Portal 2] Remote Code Execution via voice packets内存破坏 · 2021-05-11 · 严重
    $5,000经典缓冲区溢出
14. 163
    [Half-Life 1] Malformed map name leads to memory corruption and code execution内存破坏 · 2020-09-23 · 高危
    $1,500经典缓冲区溢出
15. 154
    Malformed .BSP Access Violation in CS:GO can lead to Remote Code Execution内存破坏 · 2018-07-20 · 严重
    $0经典缓冲区溢出
16. 123
    MySQL username and password leaked in developer.valvesoftware.com via source code dislosure信息泄露 · 2018-05-08 · 中危
    $0Password in Configuration File
17. 112
    [help.steampowered.com] Account takeover bruteforcing SteamGuard业务逻辑 · 2019-01-23 · 高危
    $2,500业务逻辑错误
18. 109
    ISteamAssets gives partners control over unrelated community market transactions访问控制 · 2019-05-24 · 高危
    $0访问控制缺陷（通用）
19. 109
    Specially Crafted Closed Captions File can lead to Remote Code Execution in CS:GO and other Source Games内存破坏 · 2021-05-05 · 严重
    $7,500经典缓冲区溢出
20. 99
    Malformed save files (.sav) allow to write files with arbitrary extensions and content in GoldSrc-based games.代码执行 · 2020-02-24 · 高危
    $1,500Malware
21. 90
    Malformed .MDL triggers an Access Violation on GoldSRC (hl.exe)内存破坏 · 2019-10-09 · 高危
    $0内存破坏（通用）
22. 88
    Access to microtransaction sales data for lots of apps from 2014 to present at /valvefinance/sanity/访问控制 · 2021-09-22 · 严重
    $0访问控制缺陷（通用）
23. 86
    ImageMagick GIF coder vulnerability leading to memory disclosure信息泄露 · 2018-07-03 · 中危
    $0信息泄露
24. 80
    [steam client] Opening a specific steam:// url overwrites files at an arbitrary location内存破坏 · 2020-09-23 · 中危
    $750Write-what-where Condition
25. 66
    CS:GO Server -> Client RCE through OOB access in CSVCMsg_SplitScreen + Info leak in HTTP download内存破坏 · 2021-05-18 · 严重
    $7,500越界读