CVE-2024-7834: Local privilege escalation in Overwolf
A local privilege escalation is caused by Overwolf loading and executing certain dynamic link library files from a user-writeable folder in SYSTEM context on launch. This allows an attacker with unprivileged access to the system to run arbitrary code with SYSTEM privileges by placing a malicious .dll file in the respective location.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7834?
CVE-2024-7834 is classified as a local privilege escalation vulnerability, allowing unprivileged users to execute arbitrary code with SYSTEM privileges.
How do I fix CVE-2024-7834?
To fix CVE-2024-7834, ensure that Overwolf is updated to the latest version beyond 250.1.1 and restrict write access to directories used by the application.
Who is affected by CVE-2024-7834?
CVE-2024-7834 affects users of Overwolf version 250.1.1 and earlier, particularly on systems where users have access to modify files in the application's directory.
What systems are vulnerable to CVE-2024-7834?
CVE-2024-7834 can affect any Windows system running a vulnerable version of Overwolf that allows execution of dynamic link libraries from user-writeable folders.
Can CVE-2024-7834 be exploited remotely?
CVE-2024-7834 requires local access to the system for exploitation, making it less likely to be exploited remotely.