CVE-2019-17180: Path Traversal
Valve Steam Client before 2019-09-12 allows placing or appending partially controlled filesystem content, as demonstrated by file modifications on Windows in the context of NT AUTHORITY\SYSTEM. This could lead to denial of service, elevation of privilege, or unspecified other impact.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-17180?
CVE-2019-17180 is a vulnerability in Valve Steam Client that allows placing or appending partially controlled filesystem content, leading to denial of service, elevation of privilege, or unspecified other impact.
How severe is CVE-2019-17180?
CVE-2019-17180 has a severity value of 7.8, which is considered high.
How does CVE-2019-17180 affect Valve Steam Client?
CVE-2019-17180 affects Valve Steam Client versions before 2019-09-12 by allowing the placement or appending of partially controlled filesystem content.
Does CVE-2019-17180 affect Microsoft Windows?
No, CVE-2019-17180 does not affect Microsoft Windows.
Is there a fix for CVE-2019-17180?
Yes, updating Valve Steam Client to version 2019-09-12 or later will fix CVE-2019-17180.