CVE-2013-2604 | BDVDB-2026-67247 Detail

Description#

RealNetworks GameHouse RealArcade Installer (aka ActiveMARK Game Installer) 2.6.0.481 and 3.0.7 uses weak permissions (Create Files/Write Data) for the GameHouse Games directory tree, which allows local users to gain privileges via a Trojan horse DLL in an individual game's directory, as demonstrated by DDRAW.DLL in the Zuma Deluxe directory.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12015-01-12Record published in the CVE List.
2. Version 22024-08-06Most recent update recorded in the CVE List.