CVE-2016-5237
MEDIUMValve SteamOS < 3.42.16.13 - Local Privilege Escalation via Weak File Permissions
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2016-5237. PoCs published by Gregory Smiley.
AI-analyzed exploit summary This exploit describes a local privilege escalation vulnerability in Valve Steam due to weak file permissions, allowing users in the BUILTIN\Users group to modify executable files in the Steam directory. The proof of concept involves replacing Steam.exe or related files with malicious code.
Description
Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly gain privileges as demonstrated by a Trojan horse Steam.exe file.
Exploits (1)
This exploit describes a local privilege escalation vulnerability in Valve Steam due to weak file permissions, allowing users in the BUILTIN\Users group to modify executable files in the Steam directory. The proof of concept involves replacing Steam.exe or related files with malicious code.
References (2)
Scores
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L