CVE-2013-2604

CVE-2013-2604 describes a privilege escalation vulnerability in RealNetworks GameHouse RealArcade Installer versions 2.6.0.481 and 3.0.7. The installer creates the GameHouse Games directory with weak permissions, allowing local users to write files. This flaw enables an attacker to place a malicious DLL, such as DDRAW.DLL, into a game's directory, leading to arbitrary code execution with elevated privileges when the game is launched. The vulnerability has a CVSS score of 7.2, indicating high severity, with an attack vector of local access and low attack complexity. Successful exploitation results in complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there known public exploits in Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness and attention.