PT-2019-14986
CVE-2019-17180
·
Published
2019-10-04
·
Updated
2020-01-16
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Valve Steam Client versions prior to 2019-09-12
Description
The issue allows for the placement or appending of partially controlled filesystem content. This could be demonstrated through file modifications on Windows, specifically in the context of NT AUTHORITYSYSTEM, potentially leading to denial of service, elevation of privilege, or other unspecified impacts.
Recommendations
For versions prior to 2019-09-12, update to a version released after 2019-09-12 to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾