high7.8Public exploit code
CVE-2020-12242
Valve Source allows local users to gain privileges by writing to the /tmp/hl2_relaunch file, which is later executed in the context of a different user account.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Source Engine CS:GO BuildID: 4937372 - Arbitrary Code Execution2020-04-27 · local · macos
Impact
Valve Source allows local users to gain privileges by writing to the /tmp/hl2_relaunch file, which is later executed in the context of a different user account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Valvesoftware | Source | All versions |