CVE-2020-24574

Mô tả

Tham khảo

• jtesta/gog_galaxy_client_service_poc · Exploit
• jtesta/gog_galaxy_client_service_poc · Issue Tracking
• gog.com/galaxy · Vendor Advisory
• positronsecurity.com/blog/2020-08-13-gog-galaxy_client-local-privilege-escalation_deuce · Exploit

Lỗ hổng khác của galaxy

• CVE-2022-31262CAO 7.8An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. Due to insufficient folder permissions, an attacker can…
• CVE-2021-26807CAO 7.8GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgcc_s_dw2-1.dll and libwinpthread-1.dll from PATH, which allows an a…
• CVE-2020-7352CAO 8.8The GalaxyClientService component of GOG Galaxy runs with elevated SYSTEM privileges in a Windows environment. Due to the software shipping …
• CVE-2020-11827CAO 7.8In GOG Galaxy 1.2.67, there is a service that is vulnerable to weak file/service permissions: GalaxyClientService.exe. An attacker can put m…
• CVE-2020-15529CAO 7.8An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a game or performs a ve…