Shulou(Shulou.com)12/24 Report--

CTOnews.com, December 12 / PRNewswire-FirstCall-Asianet /-- Valve's "counter-Terrorism Elite 2" game has revealed a new security breach that allows attackers to capture players'IP addresses by injecting malicious code and launch cross-site scripting attacks (XSS) against all players in the same game hall.

Initially, attackers can only access the IP addresses of other players in the lobby, but later found that the vulnerability can be exploited to inject malware to execute JavaScript code.

The flaw was originally discovered by players trying to use Steam ID, which allows them to show NSFW GIF to other players through the in-game kick menu.

Jason Thor Hall, a US cyber security researcher and game developer, highlighted the XSS vulnerability and urged gamers not to play CS2 until the developer Valve solved the problem.

The security breach did not affect the enthusiasm of "counter-Terrorism Elite 2" players, with a peak of about 1.1 million players a day a week before the breach was made public, while the number of online players peaked at around 1 million during the disclosure of the breach on December 11.

CTOnews.com Note: Valve seems to have fixed the vulnerability, and online discussions suggest that Valve may easily detect which players have exploited the vulnerability, which means that any player who exploits the vulnerability could be punished by VAC later.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.