CVE-2016-5237: Medium severity Valvesoftware Steamos vulnerability
Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly gain privileges as demonstrated by a Trojan horse Steam.exe file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5237?
CVE-2016-5237 is classified as a high severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2016-5237?
To fix CVE-2016-5237, ensure that file permissions in the Steam program directory are configured to restrict unauthorized access.
Who is affected by CVE-2016-5237?
CVE-2016-5237 affects users of Valve Software's SteamOS version 3.42.16.13 and earlier.
What kind of attack does CVE-2016-5237 facilitate?
CVE-2016-5237 facilitates local users to modify Steam files, potentially allowing them to execute malicious code with elevated privileges.
Can CVE-2016-5237 be exploited remotely?
CVE-2016-5237 cannot be exploited remotely as it requires local access to the system to take advantage of the weak file permissions.