CVE-2012-4177 The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbit_exe_path command line argument.
HighCVSS 10.0
EPSS 58.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbit_exe_path command line argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubi uplay pc | <= 2.0.3 | No fix listed |
| ubi uplay pc | = 2.0 | No fix listed |
| ubi uplay pc | = 2.0.1 | No fix listed |
| ubi uplay pc | = 2.0.2 | No fix listed |
References
- forums.ubi.com
- 84402 vdb-entry
- 20120729 Re: AxMan ActiveX fuzzing <== Memory Corruption PoC mailing-list
- www.bbc.com
- 20321 exploit