Valve Software has patched a vulnerability in the Steam gaming platform that enabled account hijacking through its password reset mechanism.