This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=13

aluigi, posted Tue Aug 05, 2014 5:54 pm (16)

---

Before the 03 July 2014 was possible to crash, freeze and in some cases probably even executing malicious code against all the players in a server or lobby of the games that use the Steam Voip API.

Do you know those games like Grid2 and the Valve ones (HL2, L4D*, Portal*) that allow you to voice chat?
Exactly those.
Even the same Steam client for the voice chat with the friends was vulnerable.

That's what I like of frameworks and libraries.

I created a dll injected in the game process that transformed any affected game in an exploit.

The full details are available in the following PDF:
http://revuln.com/files/ReVuln_Steam_Voip_Security.pdf

aluigi, posted Tue Dec 11, 2018 8:32 pm (41279)

---

An html version of the paper is available here:
https://revuln.blogspot.com/2018/12/ste ... -2014.html