#VU40589 Permissions, Privileges, and Access Controls in Steam - CVE-2015-7985

Vulnerability identifier: #VU40589

Vulnerability risk: High

CVSSv4.0: 7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber]

CVE-ID: CVE-2015-7985

CWE-ID: CWE-264

Exploitation vector: Network

Exploit availability: Yes

Vulnerable software:
Steam
Client/Desktop applications / Other client software

Vendor: Valve Software

Description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

Valve Steam 2.10.91.91 uses weak permissions (Users: read and write) for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Steam: 2.10.91.91

---

External links
https://packetstormsecurity.com/files/134513/Steam-2.10.91.91-Weak-File-Permissions-Privilege-Escalation.html
https://www.securityfocus.com/archive/1/536961/100/0/threaded

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.