PT-2022-20650 · Gog · Gog Galaxy

Sec77 · Published 2022-08-17 · Updated 2022-12-31 · CVE-2022-31262

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GOG Galaxy versions 2.0.46 through 2.0.51

Description An exploitable local privilege escalation issue exists due to insufficient folder permissions. An attacker can hijack the %ProgramData%GOG.com folder structure and change the GalaxyCommunication service executable to a malicious file, resulting in code execution as SYSTEM.

Recommendations For GOG Galaxy versions 2.0.46 through 2.0.51, consider restricting access to the GalaxyCommunication service to minimize the risk of exploitation until a patch is available. As a temporary workaround, disabling the GalaxyCommunication service may prevent the issue, but this may affect the functionality of GOG Galaxy. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Preservation of Permissions

Weakness Enumeration

CWE-281

Related Identifiers

CVE-2022-31262

Affected Products

Gog Galaxy

References · 9

• 🔥 https://github.com/secure-77/CVE-2022-31262 · Exploit
• 🔥 https://secure77.de/category/subjects/researches · Exploit
• 🔥 https://youtube.com/watch?v=Bgdbx5TJShI · Exploit
• 🔥 https://secure77.de/gog-galaxy-cve-2022-31262 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-31262 · Security Note
• https://osv.dev/vulnerability/CVE-2022-31262 · Vendor Advisory
• https://t.me/cibsecurity/48286 · Telegram Post
• https://t.me/poxek/2647 · Telegram Post
• https://t.me/poxek/2635 · Telegram Post