CVE-2015-7985

Valve Steam 2.10.91.91 uses weak permissions (Users: read and write) for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2015-11-24

Last modified

2024-08-06

Weaknesses

CWE-276

Affected products

• Steam Client (Valvesoftware)

References

• http://packetstormsecurity.com/files/134513/Steam-2.10.91.91-Weak-File-Permissions-Privilege-Escalation.html
• http://www.securityfocus.com/archive/1/536961/100/0/threaded