CVE-2024-7834

A local privilege escalation is caused by Overwolf loading and executing certain dynamic link library files from a user-writeable folder in SYSTEM context on launch. This allows an attacker with unprivileged access to the system to run arbitrary code with SYSTEM privileges by placing a malicious .dll file in the respective location.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.cirosec.de/sa/sa-2024-004	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:overwolf:overwolf:*:*:*:*:*:*:*:*

History

05 Sep 2024, 17:52

Type	Values Removed	Values Added
References	~~() https://www.cirosec.de/sa/sa-2024-004 -~~	() https://www.cirosec.de/sa/sa-2024-004 - Third Party Advisory
Summary		(es) Una escalada de privilegios locales se produce cuando Overwolf carga y ejecuta determinados archivos de librería de vínculos dinámicos desde una carpeta que permite la escritura del usuario en el contexto del SYSTEM al iniciarse. Esto permite que un atacante con acceso sin privilegios al sistema ejecute código arbitrario con privilegios del SYSTEM colocando un archivo .dll malicioso en la ubicación correspondiente.
CPE		cpe:2.3:a:overwolf:overwolf::::::::
First Time		Overwolf Overwolf overwolf

04 Sep 2024, 13:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-09-04 13:15

Updated : 2024-09-05 17:52

NVD link : CVE-2024-7834

Mitre link : CVE-2024-7834

CVE.ORG link : CVE-2024-7834

JSON object : View

Products Affected

overwolf

overwolf

CWE

CWE-427

Uncontrolled Search Path Element

{"id": "CVE-2024-7834", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "a341c0d1-ebf7-493f-a84e-38cf86618674", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2024-09-04T13:15:07.030", "references": [{"url": "https://www.cirosec.de/sa/sa-2024-004", "tags": ["Third Party Advisory"], "source": "a341c0d1-ebf7-493f-a84e-38cf86618674"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-427"}]}, {"type": "Secondary", "source": "a341c0d1-ebf7-493f-a84e-38cf86618674", "description": [{"lang": "en", "value": "CWE-427"}]}], "descriptions": [{"lang": "en", "value": "A local privilege escalation is caused by Overwolf\nloading and executing certain dynamic link library files from a user-writeable\nfolder in SYSTEM context on launch. This allows an attacker with unprivileged\naccess to the system to run arbitrary code with SYSTEM privileges by placing a\nmalicious .dll file in the respective location."}, {"lang": "es", "value": "Una escalada de privilegios locales se produce cuando Overwolf carga y ejecuta determinados archivos de librer\u00eda de v\u00ednculos din\u00e1micos desde una carpeta que permite la escritura del usuario en el contexto del SYSTEM al iniciarse. Esto permite que un atacante con acceso sin privilegios al sistema ejecute c\u00f3digo arbitrario con privilegios del SYSTEM colocando un archivo .dll malicioso en la ubicaci\u00f3n correspondiente."}], "lastModified": "2024-09-05T17:52:06.147", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:overwolf:overwolf:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA50C3FD-7195-4480-B383-1340702378BF", "versionEndExcluding": "250.1.1"}], "operator": "OR"}]}], "sourceIdentifier": "a341c0d1-ebf7-493f-a84e-38cf86618674"}