First published: Thu Sep 19 2019(Updated: )
vphysics.dll in Counter-Strike: Global Offensive before 1.37.1.1 allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map is mishandled during a memset call.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Counter-Strike 2 | <1.37.1.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-15943 is a vulnerability in vphysics.dll in Counter-Strike: Global Offensive before 1.37.1.1 that allows remote attackers to achieve code execution or denial of service.
CVE-2019-15943 works by creating a gaming server and inviting a victim to this server, where a crafted map is mishandled during a memset call.
CVE-2019-15943 has a severity rating of 8.8 (high).
Versions of Counter-Strike: Global Offensive before 1.37.1.1 are affected by CVE-2019-15943.
To fix CVE-2019-15943, update Counter-Strike: Global Offensive to version 1.37.1.1 or later.