exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from Andrew J. Smith

Steam 2.10.91.91 Weak File Permissions Privilege Escalation

Posted Nov 23, 2015

Authored by Andrew J. Smith

A privilege escalation vulnerability has been identified in that the Steam Microsoft Windows client software is installed with weak default permissions. These permissions grant read and write access to the Windows Users group for the install folder. This includes Steam.exe which is launched upon user login. Version 2.10.91.91 is confirmed vulnerable.

tags | advisory

systems | windows

advisories | CVE-2015-7985

SHA-256 | 66f1b7811fa2e915d358da3af9007cb2b0c58c1031bb2b909b5fc2f1e8067197

Download | Favorite | View