CVEvulnerability
CVE-2016-5237
4.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-01-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 4.8 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly gain privileges as demonstrated by a Trojan horse Steam.exe file.
Affected configurations
• valvesoftware steamos (<= 3.42.16.13)
Related
Weakness · not in database (1)
References
- https://packetstormsecurity.com/files/137343/Valve-Steam-3.42.16.13-Local-Privilege-Escalation.html Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/39888/ www.exploit-db.com
- https://packetstormsecurity.com/files/137343/Valve-Steam-3.42.16.13-Local-Privilege-Escalation.html Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/39888/ www.exploit-db.com