Custom modes created on DOTA 2 and exploiting a flaw that raises a security hazard have been discovered.
The high-severity flaw in question resides in JavaScript V8, which potentially provides remote access to players using the affected game modes.
Pirate DOTO
Community-created modes on DOTA 2 are commonplace. Some have even become so popular that they have spawned new game types, such as Auto Chess, since widely taken up elsewhere. Unfortunately, some modes don’t have such laudable intentions.
This is particularly the case for several modes created by a Steam user and published on the Workshop. Usually, Valve reviews such creations before they are published to ensure that they are safe. However, the fashions in question seem to have managed to slip through the cracks.
They have fantastic names like ” test addon plz ignore », « Overdog no annoying heroes », « Custom Hero Brawl “, or ” Overthrow RTZ Edition X10 XP “. Each has been established as exploiting the JavaScript V8 flaw.
A dormant threat
Thus, the players of DOTA 2 who joined the aforementioned modes potentially exposed their computer to remote access by their creator. This could thus install other malware or backdoors to return to exploit the infected machine at will.
The threat is however to be tempered. Even though the creator of the mods maliciously did not see fit to notify Valve of this flaw, a patch was applied last month, and the suspect mods were removed.
Given the minimal scope of the litigious modes, their creator in all likelihood used them for research purposes. His objective, as dishonest as it was, did not appear to be to infect computers as hard as he could, especially with such obscure modes. But the door is in any case potentially open to other exploitations of this type, even if the fault which interests us here has been corrected, and the dangerous modes, put out of harm’s way.
Download
- An essential service for any PC gamer
- A pleasant social network side
- Voice chat that does the job
Steam is unquestionably one of the must-have software for any PC gamer. A leader in the field of the sale of dematerialized games, the Valve platform also allows its users to take advantage of features that have become inherent in the practice of online video games, including voice and text chat. In other words, Steam allows everything to be combined in one software: the social aspect and communication between friends, but also the direct proxy of the games. An all-in-one that has been successful at Valve for almost a decade.
Steam is unquestionably one of the must-have software for any PC gamer. A leader in the field of the sale of dematerialized games, the Valve platform also allows its users to take advantage of features that have become inherent in the practice of online video games, including voice and text chat. In other words, Steam allows everything to be combined in one software: the social aspect and communication between friends, but also the direct proxy of the games. An all-in-one that has been successful at Valve for almost a decade.
Source : Decoded.avast.io
0