1. Home
  2. CVE Database
  3. CVE-2018-3974
HIGH · 7.8

CVE-2018-3974

An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install directory. An attacker can overwrite an executable that is launched as a system ser...

Vulnerability Description

An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install directory. An attacker can overwrite an executable that is launched as a system service on boot by default to exploit this vulnerability and execute arbitrary code with system privileges.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
GogGalaxy1.2.45.61

Related Weaknesses (CWE)

CWE-732

References

FAQ

What is CVE-2018-3974?

CVE-2018-3974 is a vulnerability with a CVSS score of 7.8 (HIGH). An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install directory. An attacker can overwrite an executable that is launched as a system ser...

How severe is CVE-2018-3974?

CVE-2018-3974 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-3974?

Check the references section above for vendor advisories and patch information. Affected products include: Gog Galaxy.