{"id":"CVE-2024-7834","state":"PUBLISHED","title":"Local privilege escalation in Overwolf","description":"A local privilege escalation is caused by Overwolf\nloading and executing certain dynamic link library files from a user-writeable\nfolder in SYSTEM context on launch. This allows an attacker with unprivileged\naccess to the system to run arbitrary code with SYSTEM privileges by placing a\nmalicious .dll file in the respective location.","publishedAt":"2024-09-04T12:35:27.628Z","updatedAt":"2024-09-04T13:15:24.562Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"cirosec"},"assigner":"cirosec","products":["Overwolf Overwolf"],"affected":[{"vendor":"Overwolf","product":"Overwolf","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"250.1.1","versionType":"custom"}],"platforms":["Windows"]}],"references":["https://www.cirosec.de/sa/sa-2024-004"],"weaknesses":["CWE-427"],"ingestedAt":"2026-10-29T20:08:20.985Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/7xxx/CVE-2024-7834.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-7834","state":"PUBLISHED","datePublished":"2024-09-04T12:35:27.628Z","dateUpdated":"2024-09-04T13:15:24.562Z","assignerShortName":"cirosec","assignerOrgId":"a341c0d1-ebf7-493f-a84e-38cf86618674","dateReserved":"2024-08-15T07:21:21.987Z"},"containers":{"cna":{"title":"Local privilege escalation in Overwolf","descriptions":[{"lang":"en","value":"A local privilege escalation is caused by Overwolf\nloading and executing certain dynamic link library files from a user-writeable\nfolder in SYSTEM context on launch. This allows an attacker with unprivileged\naccess to the system to run arbitrary code with SYSTEM privileges by placing a\nmalicious .dll file in the respective location."}],"affected":[{"vendor":"Overwolf","product":"Overwolf","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"250.1.1","versionType":"custom"}],"platforms":["Windows"]}],"references":[{"url":"https://www.cirosec.de/sa/sa-2024-004","tags":["third-party-advisory"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-427","description":"CWE-427 Uncontrolled Search Path Element","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"cirosec","orgId":"a341c0d1-ebf7-493f-a84e-38cf86618674","dateUpdated":"2024-09-04T12:35:27.628Z"},"credits":[{"lang":"en","type":"finder","value":"Lukas Bühl <lukas.buehl@cirosec.de>"}],"impacts":[{"capecId":"CAPEC-233","descriptions":[{"lang":"en","value":"CAPEC-233 Privilege Escalation"}]}],"source":{"advisory":"SA-2024-004","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"overwolf","product":"overwolf","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"250.1.1","versionType":"custom"}],"cpes":["cpe:2.3:a:overwolf:overwolf:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-04T13:07:34.850195Z","id":"CVE-2024-7834","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-04T13:15:24.562Z"}}]}}}