medium4.8Public exploit code
CVE-2016-5237
Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly gain privi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Valve Steam 3.42.16.13 - Local Privilege Escalation2016-06-06 · local · windows
Impact
Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly gain privileges as demonstrated by a Trojan horse Steam.exe file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Valvesoftware | Steamos | through 3.42.16.13 |
Weakness classification
References
- NVD record
- CVE.org record
- https://packetstormsecurity.com/files/137343/Valve-Steam-3.42.16.13-Local-Privilege-Escalation.html
- https://www.exploit-db.com/exploits/39888/
- https://packetstormsecurity.com/files/137343/Valve-Steam-3.42.16.13-Local-Privilege-Escalation.html
- https://www.exploit-db.com/exploits/39888/