Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

V Society fixes loopholes in the "Anti-Terrorism Elite 2" game: it can grab players'IP addresses and launch XSS attacks.

2024-03-04 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > IT Information >

Share

Shulou(Shulou.com)12/24 Report--

CTOnews.com, December 12 / PRNewswire-FirstCall-Asianet /-- Valve's "counter-Terrorism Elite 2" game has revealed a new security breach that allows attackers to capture players'IP addresses by injecting malicious code and launch cross-site scripting attacks (XSS) against all players in the same game hall.

Initially, attackers can only access the IP addresses of other players in the lobby, but later found that the vulnerability can be exploited to inject malware to execute JavaScript code.

The flaw was originally discovered by players trying to use Steam ID, which allows them to show NSFW GIF to other players through the in-game kick menu.

Jason Thor Hall, a US cyber security researcher and game developer, highlighted the XSS vulnerability and urged gamers not to play CS2 until the developer Valve solved the problem.

The security breach did not affect the enthusiasm of "counter-Terrorism Elite 2" players, with a peak of about 1.1 million players a day a week before the breach was made public, while the number of online players peaked at around 1 million during the disclosure of the breach on December 11.

CTOnews.com Note: Valve seems to have fixed the vulnerability, and online discussions suggest that Valve may easily detect which players have exploited the vulnerability, which means that any player who exploits the vulnerability could be punished by VAC later.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

IT Information

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report