PT-2019-8881 · Valve · Steam

Publicado 2019-05-20 · Atualizado 2022-02-07 · CVE-2018-12270

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Valve Steam version 1528829181 BETA

Description The issue allows for a homograph or homoglyph attack, enabling the creation of fake URLs in the client. This could potentially trick users into visiting unintended websites.

Recommendations For version 1528829181 BETA, consider avoiding clicking on suspicious links within the client until a fix is available. As a temporary workaround, users should be cautious when clicking on links and verify the authenticity of the URL before proceeding.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-12270

Produtos afetados

Steam

Referências · 3

• 🔥❌ https://github.com/VixusFoxy/CVE/wiki/CVE-2018-12270 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2018-12270 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-12270 · Aviso do Fabricante