CVE Catalog
CVE-2023-35855
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk0.98%
58th percentile - higher than 58% of all known CVEs
Summary
A buffer overflow in Counter-Strike allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile console variable.
Risk Assessment
An attacker can remotely take control of the client's system, posing a serious threat to data security and system integrity.
Recommendation
It is recommended to update the game to the latest version and to monitor and restrict access to game servers to minimize the risk of attack.
Original NVD description (English source)
A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile console variable.