Twitter Facebook
An error has occurred

ZeroLives.com serves cookies to personalize content, show advertisements and analyze traffic. Information about your use of this website may be shared with third parties.
More information
OK
Advertisement
You have already read articles for free this month
Do you enjoy our journalism? Read this article and everything else we've written without restrictions with premium.
star
Subscribe now

Valve Source SDK vulnerability allowed remote code execution, fixed in latest game updates

by
Thursday, July 20, 2017 - 18:00 GMT
Valve Source SDK vulnerability allowed remote code execution, fixed in latest game updates
Thursday, July 20, 2017 - 18:00 GMT

Valve's Source SDK contained a buffer overflow vulnerability that allowed remote code execution. The issue was fixed in the latest game updates.


Information on the vulnerability was released last night by security research firm One Up Security. Affected titles included Counter-Strike: Global Offensive, Team Fortress 2, Half-Life 2: Death Match, Portal 2 and Left 4 Dead 2, as well as third party games that are built upon the Source SDK.

No one likes ads. We know that. But ads help us pay the bills. sentiment_dissatisfied
Please whitelist us in your adblocker software so that we can continue to provide quality content.
Advertisement
According to the publication, Valve acted swiftly when the research firm contacted the game development studio last month. The vulnerability was fixed with the release of several game updates that same month.

The vulnerability was found inside a function that takes care of ragdoll model physics that is used when players die. The vulnerability opened the way for potential exploits to run on the player's PC.

The fixes deployed by Valve only affect Valve's own products. Video game developers who have created a Source SDK modification game still have to manually apply and distribute a hotfix patch themselves.

The original Half-Life game that released in 1998 has also received updates this month to address similar issues.
Do you want to read this entire premium article?
ZeroLives.com is editorially independent. Our journalism is free from commercial bias and is neither influenced nor funded by game publishers or other third parties.

Consider supporting our independent journalists by becoming a premium subscriber to gain unrestricted access to all content and features.

Every contribution we receive goes directly into funding our journalism to ensure we can continue doing what we do best.
You have already read 5 free articles this month
Consider supporting our independent journalists by becoming a subscriber.
This is one of 5 articles that we're giving you free of charge
You can still read articles for free this month. Consider supporting our independent journalists by becoming a subscriber.
You have read this entire premium article completely free of charge
ZeroLives.com is editorially independent. Our journalism is free from commercial bias and is neither influenced nor funded by game publishers or other third parties.

Consider supporting our independent journalists by becoming a premium subscriber to gain unrestricted access to all content and features.

Every contribution we receive goes directly into funding our journalism to ensure we can continue doing what we do best.
No one likes ads. We know that. But ads help us pay the bills. sentiment_dissatisfied
Please whitelist us in your adblocker software so that we can continue to provide quality content.
Advertisement
subject
Related video games news
Half-Life 2
Valve
Platforms
PC, Xbox One, Mac, Xbox 360, Linux
Release date
November 16, 2004 (PC)
assignment
Learn more
chat_bubble

Comments

What do you think?
Let us know how you reacted to this article
person

About the author

Raymond Bakker
Journalist and Software Developer at Moonlight Multimedia. He covers the latest video games news from indie to virtual reality and has been actively involved in the video games industry since the early 2000s.
bubble_chart

Read more about

Half-Life 2
Valve
Platforms
PC, Xbox One, Mac, Xbox 360, Linux
Release date
November 16, 2004 (PC)
assignment
Learn more
Advertisement
No one likes ads. We know that. But ads help us pay the bills. sentiment_dissatisfied
Please whitelist us in your adblocker software so that we can continue to provide quality content.
Advertisement
ZeroLives.com
ZeroLives.com
Get the official mobile app
close
Do you want to receive notifications for breaking news?
Enable notifications
No spam. Just news.
Weekly newsletter
Stay updated with our weekly newsletter. The latest news in your e-mail inbox every Saturday.
done
Do it
close
No thanks!
Thank you for subscribing
close
Close