1. Home
  2. CVE Database
  3. CVE-2016-5237
MEDIUM · 4.8

CVE-2016-5237

Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly gain privileges as demonstrated by a Trojan horse S...

Vulnerability Description

Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly gain privileges as demonstrated by a Trojan horse Steam.exe file.

CVSS Score

4.8

MEDIUM

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
ValvesoftwareSteamos<= 3.42.16.13

Related Weaknesses (CWE)

CWE-264

References

FAQ

What is CVE-2016-5237?

CVE-2016-5237 is a vulnerability with a CVSS score of 4.8 (MEDIUM). Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly gain privileges as demonstrated by a Trojan horse S...

How severe is CVE-2016-5237?

CVE-2016-5237 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-5237?

Check the references section above for vendor advisories and patch information. Affected products include: Valvesoftware Steamos.