New RCE found for Dark Souls 3

12 points by wbc 4 years ago | 1 comment

There's a multiplayer mode (invasions?) that lets other players join your game. This RCE exploit can happen then.

Elden Ring, from the same devs, also has this vuln: https://old.reddit.com/r/Eldenring/comments/s9wai2/it_is_now_possible_for_dark_souls_3_invaders_to/

Apparently, there was an old exploit: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34170

This one is new and not "official" yet.

Already happened on twitch: https://www.twitch.tv/videos/1271478221?t=1h20m10s

Cloudef 4 years ago |

This is the reason I run games under linux inside a sandbox with restricted access to the system, and don't play anything that requires a rootkit (anti-cheat).