I'm surprised more exploits aren't being found in games, they're usually thrown together as quickly as possible.
Grand Theft Auto V exploit assigned CVE number due to partial RCE
11–20 of 42 posts
Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE
#12FWIW, > CVE-2023-24059 What other video games have had CVE's?
Source Engine CVE-2021-30481
There's actually been a lot more of these that don't get CVEs It's one of the reasons I prefer to game in a VM with heavy network filtering and egress only through VPN
There is little to no care from game developers about security, games with actively exploitable RCEs (see pretty much the whole CoD franchise) are just allowed to stay up on Steam
Gamers are also kinda dumb and oblivious to RATs etc which doesn't help
Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE
#13RCE: remote code execution
CVE #: Common Vulnerabilities and Exposures number, assigned by the MITRE Corporation
Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE
#14FWIW, > CVE-2023-24059 What other video games have had CVE's?
Source Engine CVE-2021-30481 There's actually been a lot more of these that don't get CVEs It's one of the reasons I prefer to game in a VM with heavy network filtering and egress only through VPN There is little to no care from game developers about security, games with actively exploitable RCEs (see pretty much the whole CoD franchise) are just allowed to stay up on Steam Gamers are also kinda dumb and oblivious to…
How do you game in a VM? A lot of my game time includes flight simulators with many external peripherals.
Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE
#15GTA V has averaged >100k concurrent players on steam for the last 3 years, so a RCE has a lot of potential targets ripe for exploitation.
It only needs to make it into a mod-menu to get wide, unsuspecting distribution.
For those curious, mod menus are what "hackers" use to exploit the gameplay for fun. Script-kiddies are a good analog in history. They're often just kids who googled GTA hacks and installed from the first page they thought looked cool. They'll be prime targets for distribution.
Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE
#16FWIW, > CVE-2023-24059 What other video games have had CVE's?
Source Engine CVE-2021-30481 There's actually been a lot more of these that don't get CVEs It's one of the reasons I prefer to game in a VM with heavy network filtering and egress only through VPN There is little to no care from game developers about security, games with actively exploitable RCEs (see pretty much the whole CoD franchise) are just allowed to stay up on Steam Gamers are also kinda dumb and oblivious to…
How do you play any game with anti-cheat in a VM?
Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE
#17FWIW, > CVE-2023-24059 What other video games have had CVE's?
Call of Duty before 2015, CVE-2018-20817 and CVE-2018-10718, another RCE too.
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2081...
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1071...
Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE
#18FWIW, > CVE-2023-24059 What other video games have had CVE's?
If I recall correctly, the log4j exploit was first (publicly) discovered affecting Minecraft.
Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE
#19FWIW, > CVE-2023-24059 What other video games have had CVE's?
Source Engine CVE-2021-30481 There's actually been a lot more of these that don't get CVEs It's one of the reasons I prefer to game in a VM with heavy network filtering and egress only through VPN There is little to no care from game developers about security, games with actively exploitable RCEs (see pretty much the whole CoD franchise) are just allowed to stay up on Steam Gamers are also kinda dumb and oblivious to…
Naive and trusting is probably a fairer characterization. They aren't nor should they need to be security experts, the company who distributed the code should be more responsible, and more controversialy I think they should also be more culpable. We are past the startup friendly wild west stage of software technology, we know better and should expect better.
Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE
#20FWIW, > CVE-2023-24059 What other video games have had CVE's?
Just had a quick look at Luigi Auriemma's website[1] to see if he had any CVEs listed - he found a ton of interesting bugs in video games - I used to follow his work closely when I was running game servers as they often could end up impacting us & figured if anyone had some it'd be him, but surprisingly don't see any listed!