Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-7985. PoCs published by MrDoug.
AI-analyzed exploit summary The writeup describes a local privilege escalation vulnerability in multiple Steam client executables due to overly permissive file permissions (BUILTIN\Users:F). It lists affected files and notes that Steam's auto-start behavior exacerbates the risk.
Description
Valve Steam 2.10.91.91 uses weak permissions (Users: read and write) for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file.
Exploits (1)
The writeup describes a local privilege escalation vulnerability in multiple Steam client executables due to overly permissive file permissions (BUILTIN\Users:F). It lists affected files and notes that Steam's auto-start behavior exacerbates the risk.