CVE-2015-4016

概要

参考情報

• store.steampowered.com/news/16801 · Patch
• securityfocus.com/bid/74735 · Third Party Advisory
• zerodayinitiative.com/advisories/ZDI-15-233 · Third Party Advisory

steam client のその他の脆弱性

• CVE-2021-30481緊急 9.0Valve Steam before 2021-04-17, when a Source engine game is installed, allows remote authenticated users to execute arbitrary code because o…
• CVE-2020-15530高 7.8An issue was discovered in Valve Steam Client 2.10.91.91. The installer allows local users to gain NT AUTHORITY\SYSTEM privileges because so…
• CVE-2019-17180高 7.8Valve Steam Client before 2019-09-12 allows placing or appending partially controlled filesystem content, as demonstrated by file modificati…
• CVE-2019-15316高 7.0Valve Steam Client for Windows through 2019-08-20 has weak folder permissions, leading to privilege escalation (to NT AUTHORITY\SYSTEM) via …
• CVE-2019-15315高 7.8Valve Steam Client for Windows through 2019-08-16 allows privilege escalation (to NT AUTHORITY\SYSTEM) because local users can replace the c…