CVE-2015-7985: High severity steam client vulnerability
Published Nov 24, 2015
·Updated
Valve Steam 2.10.91.91 uses weak permissions (Users: read and write) for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file.
Affected Software
1 affected component
Valvesoftware Steam Client=2.10.91.91
Event History
Nov 24, 2015
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-7985?
The severity of CVE-2015-7985 is considered to be high due to weak file permissions allowing privilege escalation.
2
How do I fix CVE-2015-7985?
To fix CVE-2015-7985, ensure that the Install folder permissions are appropriately set to restrict write access.
3
Who is affected by CVE-2015-7985?
CVE-2015-7985 affects users of Valve Steam client version 2.10.91.91 due to improper file permissions.
4
Can CVE-2015-7985 be exploited remotely?
CVE-2015-7985 cannot be exploited remotely as it requires local access to the system.
5
What are the potential impacts of CVE-2015-7985?
The potential impacts of CVE-2015-7985 include unauthorized privilege escalation and the ability to execute malicious programs.