PT-2019-8881 · Valve · Steam

Published 2019-05-20 · Updated 2022-02-07 · CVE-2018-12270

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Valve Steam version 1528829181 BETA

Description The issue allows for a homograph or homoglyph attack, enabling the creation of fake URLs in the client. This could potentially trick users into visiting unintended websites.

Recommendations For version 1528829181 BETA, consider avoiding clicking on suspicious links within the client until a fix is available. As a temporary workaround, users should be cautious when clicking on links and verify the authenticity of the URL before proceeding.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-12270

Affected Products

Steam

References · 3

• 🔥❌ https://github.com/VixusFoxy/CVE/wiki/CVE-2018-12270 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2018-12270 · Security Note
• https://osv.dev/vulnerability/CVE-2018-12270 · Vendor Advisory