Privilege escalation in Valve Steam Client



Risk High
Patch available NO
Number of vulnerabilities 1
CVE-ID CVE-2019-15316
CWE-ID CWE-264
Exploitation vector Local
Public exploit Public exploit code for vulnerability #1 is available.
Vulnerable software
 Steam
Client/Desktop applications / Other client software

Vendor Valve Software

Security Bulletin

This security bulletin contains one high risk vulnerability.

1) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU20408

Risk: High

CVSSv4.0: 7.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber]

CVE-ID: CVE-2019-15316

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local attacker to escalate privileges on the system.

The vulnerability exists due to improper folder permissions. A local authenticated attacker can replace the "CreateMountPoint.exe" or "SetOpLock.exe" with other versions and gain elevated privileges.

Mitigation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Vulnerable software versions

Steam: 2019-08-20

CPE2.3 External links

https://amonitoring.ru/article/onemore_steam_eop_0day/
https://habr.com/ru/company/pm/blog/464367/
https://www.youtube.com/watch?v=I93aH86BUaE
https://www.youtube.com/watch?v=ZCHrjP0cMew


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.



###SIDEBAR###