anvilsecure/gog-galaxy-app-research

anvilsecure/gog-galaxy-app-research

GitHubGitHub
GitHubgithub.com
www.anvilsecure.comwww.anvilsecure.com
Releases0
Stars6
Public release for the GOG Galaxy Research Security Advisory.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-50914↗
6.7 MEDIUM—

A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy (Beta) 2.0.67.2 through v2.0.71.2 allows authentictaed users to change the DACL of arbitrary system directories to include Everyone full control permissions by modifying the FixDirectoryPrivileges instruction parameters sent from GalaxyClient.exe to GalaxyClientService.exe.

CVE-2023-50915↗
6.5 MEDIUM—

An issue exists in GalaxyClientService.exe in GOG Galaxy (Beta) 2.0.67.2 through 2.0.71.2 that could allow authenticated users to overwrite and corrupt critical system files via a combination of an NTFS Junction and an RPC Object Manager symbolic link and could result in a denial of service.