CVE-2015-7985

Name of the Vulnerable Software and Affected Versions Valve Steam version 2.10.91.91

Description The issue concerns weak permissions set for the Install folder, allowing local users to gain privileges through a Trojan horse steam.exe file. This is due to the folder having read and write permissions for all users.

Recommendations For Valve Steam version 2.10.91.91, consider restricting write access to the Install folder to prevent local users from modifying its contents, thereby mitigating the risk of privilege escalation via a Trojan horse steam.exe file.