Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2019-15316

Description

Valve Steam Client for Windows through 2019-08-20 has weak folder permissions, leading to privilege escalation (to NT AUTHORITY\SYSTEM) via crafted use of CreateMountPoint.exe and SetOpLock.exe to leverage a TOCTOU race condition.

POC

Reference

- https://habr.com/ru/company/pm/blog/464367/

- https://www.youtube.com/watch?v=I93aH86BUaE

- https://www.youtube.com/watch?v=ZCHrjP0cMew

Github

No PoCs found on GitHub currently.