POJIA破甲
地图 / [steam client] Opening a specific steam:// url overwrites files at an arbitrary location

[steam client] Opening a specific steam:// url overwrites files at an arbitrary location

内存破坏 / Write-what-where Condition / #667242

厂商
Valve
严重程度
低危 · CVSS 5.3
赏金
$750
弱点
Write-what-where Condition
研究员
@kbeckmann
披露日期
2020-09-22
资产
steam.exe
CVE
—

该报告还没有中文解读。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @kbeckmann · 版权归作者与 Valve 所有

同类报告

Race condition на market.games.mail.ruMail.ru · — · $1,000OP_SCALL in LHS of a OP_ASGN resulting in arbitrary memory writeshopify-scripts · 2017-05-30