OBS Studio DLL Injection Privilege Escalation

Emorrow

New Member
OBS Studio's Game Capture feature loads graphics hook DLLs (`graphics-hook64.dll`) without verifying their integrity or authenticity. An attacker who can replace this DLL can execute arbitrary code with whatever privileges OBS is running with—typically Administrator, since many users run OBS elevated for game streaming.

This is only a thing if OBS is installed to a user writable location. still...
 
I’d recommend installing it under Program Files and avoiding admin mode unless you really need it. Feels like a simple fix could prevent a lot of potential trouble
 
Back
Top