Valve Software

11 CVEs across 4 Valve Software products. Browse Valve Software vulnerabilities, severities, and proof-of-concept exploits.

Valve Software products with known CVEs

ProductCVEs
Half-Life Dedicated Server7
Half-Life4
Half-Life Cstrike Dedicated Server2
Webmod Plugin1
Valve Software CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2007-57132007-10-30Off-by-one error in the GeoIP module in the AMX Mod X 1.76d plugin for Half-Life Server might allow attackers to execute arbitrary code or cause a denial of se…
CVE-2007-54772007-10-16Cross-site scripting (XSS) vulnerability in auth.w in djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin allows remote attackers to inject arbitrary web s…
CVE-2006-07342006-02-16The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.6 and earlier allows remote authenticated users to cause a denial…
CVE-2004-07242004-07-27The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service (server or client crash) via an empty fragmented packet.
CVE-2003-13252003-12-31The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows remote authenticated users to cause a de…
CVE-2002-09642002-10-04Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via multiple responses to the initial challenge…
CVE-2001-09642001-09-20Buffer overflow in client for Half-Life 1.1.0.8 and earlier allows malicious remote servers to execute arbitrary code via a long console command.
CVE-2001-03592001-06-27Format string vulnerability in Sierra Half-Life build 1573 and earlier allows a remote attacker to execute arbitrary code via the map command.
CVE-2001-03582001-06-27Buffer overflows in Sierra Half-Life build 1573 and earlier allow remote attackers to execute arbitrary code via (1) a long map command, (2) a long exec comman…
CVE-2000-09692000-12-19Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format stri…
CVE-2000-09682000-12-19Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon command.