PT-2021-17142 · Unknown · Galaxyclient

Brian Papile + 1 · Published 2021-04-30 · Updated 2021-05-12 · CVE-2021-26807

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GalaxyClient version 2.0.28.9

Description The issue allows an attacker to potentially run code locally through unsigned DLL loading, as GalaxyClient loads unsigned DLLs such as zlib1.dll, libgcc s dw2-1.dll, and libwinpthread-1.dll from the system's PATH.

Recommendations For GalaxyClient version 2.0.28.9, consider restricting the loading of unsigned DLLs to prevent potential code execution. As a temporary workaround, restrict access to the PATH to minimize the risk of exploitation.

Exploit

Fix

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2021-26807

Affected Products

Galaxyclient

References · 4

• 🔥 https://illuminati.services/2021/04/29/cve-2021-26807-gog-galaxy-v2-0-35-dll-load-order-hijacking · Exploit
• https://osv.dev/vulnerability/CVE-2021-26807 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-26807 · Security Note
• https://gog.com · Vendor Advisory