Valve · Report #315256
ImageMagick GIF coder vulnerability leading to memory disclosure
Validstatus
mediumseverity
86upvotes
2 Jul 2018disclosed
Summary
Due to CVE-2017-15277, portions of server memory on some steamcommunity web servers could be leaked via image updates. An attacker would not be able to control what memory would be returned, but system information could be obtained.
I was able to arbitrarily disclose server memory on steamcommunity.com due to CVE-2017-15277.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.