Description
A local privilege escalation is caused by Overwolf
loading and executing certain dynamic link library files from a user-writeable
folder in SYSTEM context on launch. This allows an attacker with unprivileged
access to the system to run arbitrary code with SYSTEM privileges by placing a
malicious .dll file in the respective location.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Overwolf | Overwolf | < 250.1.1 | 250.1.1 |
References
- https://www.cirosec.de/sa/sa-2024-004 third-party-advisory