Valve: RCE on Steam Client via buffer overflow in Server Info

Introduction In Steam and other valve games CSGO, Half-Life, TF2 there is a functionality to find game servers called the server browser. In order to retrieve the information about these servers the server browser communicates with a specific UDP protocol called server queries. The protocol is we...

PT-2017-8701

Name of the Vulnerable Software and Affected Versions Valve Steam version 3.42.16.13 Description The issue concerns weak permissions for files in the Steam program directory, allowing local users to modify these files and potentially gain privileges. This could be exploited, for example, by...

CVE-2016-5237: Undefined Security Weakness

Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly gain privileges as demonstrated by a Trojan horse Steam.exe file...

CVE-2015-7985

Valve Steam 2.10.91.91 uses weak permissions Users: read and write for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file...

PT-2015-7693

Name of the Vulnerable Software and Affected Versions Valve Steam version 2.10.91.91 Description The issue concerns weak permissions set for the Install folder, allowing local users to gain privileges through a Trojan horse steam.exe file. This is due to the folder having read and write permissio...

Valve Steam Client Application 1559/1559 - Local Privilege Escalation

Valve Steam Client Application v1559/1559 Local Privilege Escalation Vendor: Valve Corporation Product web page: http://www.steampowered.com Affected version: Built: Jun 1, 2011 at 15:31:24 Steam API: v010 Steam package versions 1559 / 1559 File version: 1.0.968.628 Summary: Steam is a digital...