CVE-2018-12270: Input Validation

Published May 20, 2019

Updated

In Valve Steam 1528829181 BETA, it is possible to perform a homograph / homoglyph attack to create fake URLs in the client, which may trick users into visiting unintended web sites.

Affected Software

1 affected component

Valvesoftware Steam Client=1528829181-beta

Event History

May 20, 2019

CVE Published

via MITRE·01:32 PM

Data Sourced

via MITRE·01:32 PM

Description

Frequently Asked Questions

What is CVE-2018-12270?

CVE-2018-12270 is a vulnerability found in Valve Steam 1528829181 BETA that allows attackers to perform a homograph / homoglyph attack to create fake URLs in the client, potentially tricking users into visiting unintended websites.

How does CVE-2018-12270 affect Valve Steam?

CVE-2018-12270 affects Valve Steam 1528829181 BETA by allowing attackers to create fake URLs in the client, which may lead users to unintended websites.

What is the severity of CVE-2018-12270?

CVE-2018-12270 has a severity score of 5.4 (medium).

How can an attacker exploit CVE-2018-12270?

An attacker can exploit CVE-2018-12270 by using a homograph / homoglyph attack to create fake URLs in the Valve Steam client.

Is there a fix for CVE-2018-12270?

There is no known fix for CVE-2018-12270 at this time. It is recommended to stay updated with the latest patches and versions of Valve Steam to mitigate the risk.