APP: Local Steam URI In Internet Site

This signature detects the steam:// URI being used on a public web server. There are multiple vulnerabilities in the Valve Steam client's handling of steam:// URI's that could result in arbitrary code execution. This URI method is designed to only be used locally, and should not normally be seen used over the Internet. Non-malicious usage is possible, however, as some "Clan Servers" also can include links to start Steam games (such as Team Fortress 2) that then automatically connect to that clan's server.

Short Name

APP:GAME:STEAM-URI

Severity

Minor

Recommended

False

Recommended Action

None

APP: Local Steam URI In Internet Site

Found a potential security threat?