CVE-2016-5237 Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly gain privileges as demonstrated by a Trojan horse S...
MediumCVSS 4.8
EPSS 0.78%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly gain privileges as demonstrated by a Trojan horse Steam.exe file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| valvesoftware steamos | <= 3.42.16.13 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 39888 exploit