Cyberpunk 2077 bug fixed that let malicious mods take over PCs

[silversurfer]

Content source

https://www.bleepingcomputer.com/news/security/cyberpunk-2077-bug-fixed-that-let-malicious-mods-take-over-pcs/

CD Projekt Red has released a hotfix for Cyberpunk 2077 to fix a remote code execution vulnerability that could be exploited by third-party data file modifications and save games files.
On February 2nd, 20201, CD Projekt warned that Cyberpunk 2077 users should avoid using files, such as mods that modify data files or custom save game files, due to a vulnerability in how the game uses DLL files.

If you plan to use @CyberpunkGame mods/custom saves on PC, use caution. We've been made aware of a vulnerability in external DLL files the game uses which can be used to execute code on PCs. Issue will be fixed ASAP. For now, please refrain from using files from unknown sources.
— CD PROJEKT RED CS (@CDPRED_Support) February 2, 2021​

Last week, CyberpunkSaveEditor creator PixelRick disclosed that a buffer overflow vulnerability chained with a non-ASLR DLL (xinput1_3.dll) allows specially crafted save games or modifications to perform code execution on a PC.

Cyberpunk 2077 bug fixed that let malicious mods take over PCs

CD Projekt Red has released a hotfix for Cyberpunk 2077 to fix a remote code execution vulnerability that could be exploited by third-party data file modifications and save games files.

www.bleepingcomputer.com

 

[Andy Ful]

While creating games the coders do not think about game vulnerabilities. They are focused on graphics, performance, etc. Most games are coded under the pressure of time, so they have many bugs. I think that games could be the most promising vector to infect home users.

 

[ForgottenSeer 89360]

While creating games the coders do not think about game vulnerabilities. They are focused on graphics, performance, etc. Most games are coded under the pressure of time, so they have many bugs. I think that games could be the most promising vector to infect home users.

Same can be said about many other apps coming from smaller vendors and apps that chase a release schedule, rather than being released on when-ready basis. Also, IoT devices...

 

[Andy Ful]

The clue is the number of users. The popular game can have several times more users than any app made by the smaller vendor. The attacker can also make a reconnaissance by the game forums. Attacking via IoT devices is probably the future vector because they are not so popular yet.