PT-2020-14481 · Valve · Valve Steam Client

Published 2020-07-05 · Updated 2021-07-21 · CVE-2020-15530

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Valve Steam Client version 2.10.91.91

Description An issue was discovered in the Valve Steam Client. The installer allows local users to gain NT AUTHORITYSYSTEM privileges because some parts of %PROGRAMFILES(X86)%Steam and/or %COMMONPROGRAMFILES(X86)%Steam have weak permissions during a critical time window. An attacker can make this time window arbitrarily long by using opportunistic locks.

Recommendations For Valve Steam Client version 2.10.91.91, consider restricting access to the weakly permissioned parts of %PROGRAMFILES(X86)%Steam and/or %COMMONPROGRAMFILES(X86)%Steam to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2020-15530

Affected Products

Valve Steam Client

References · 4

• 🔥 http://daniels-it-blog.blogspot.com/2020/07/steam-arbitrary-code-execution-part-2.html · Exploit
• https://osv.dev/vulnerability/CVE-2020-15530 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15530 · Security Note
• https://t.me/cvenotify/4853 · Telegram Post