Grand Theft Auto V exploit assigned CVE number due to partial RCE
1–10 of 42 posts
Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE
#2FWIW,
> CVE-2023-24059
What other video games have had CVE's?
Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE
#3FWIW, > CVE-2023-24059 What other video games have had CVE's?
Fairly recently Dark Souls 3 had a pretty bad one: https://nvd.nist.gov/vuln/detail/CVE-2021-34170
They took the online servers offline in January and to their credit they patched a 6 year old game and brought the servers back in September.
Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE
#4FWIW, > CVE-2023-24059 What other video games have had CVE's?
Factorio had a CVE that allowed RCE in multiplayer servers: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1161...
Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE
#5GTA V has averaged >100k concurrent players on steam for the last 3 years, so a RCE has a lot of potential targets ripe for exploitation.
Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE
#6I feel like I'm missing something here, but: the references are two support forum threads and a reddit thread, both of which link back to the referenced twitter thread? Is there any actual confirmation that this RCE exists? What does "partial RCE" even mean?
Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE
#7[deleted]
Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE
#8I feel like I'm missing something here, but: the references are two support forum threads and a reddit thread, both of which link back to the referenced twitter thread? Is there any actual confirmation that this RCE exists? What does "partial RCE" even mean?
[deleted]
Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE
#9These games have tens of millions of lines of code (often building on top of the older components). They are also written in memory unsafe C++, by developers focused on features and rapid sales, to users that look forward to new features not better security.
I won’t be surprised at all if they are filled with vulnerabilities.
Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE
#10FWIW, > CVE-2023-24059 What other video games have had CVE's?
Not game specific, but I'll put this here: https://portswigger.net/daily-swig/valve-belatedly-fixes-ste...