Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly gain privileges as demonstrated by a Trojan horse Steam.exe file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Steamos | Valvesoftware | * | 3.42.16.13 (including) |