Wednesday, January 24, 2018

Google Researcher Uncovers Major Vulnerability In Blizzard's Games, Now Fixed

A Google security researcher, Tavis Ormandy, revealed a major vulnerability in the gaming software from Blizzard--now fixed--which would had enabled hackers to install any software they wanted. The security hole used the updating software used by Irvine-based Blizzard Games for such popular games as Overwatch and World of Warcraft. According to the researcher, Blizzard's software included what is called a "DNS rebinding flaw" which would have enabled attackers to install malicious files, use network drives, and otherwise compromise a computer. The report did not detail any actual use of the security issue in the wild, and says Blizzard had addressed the issue with a patch to its software.