Lucene search
HistoryAug 07, 2012 - 8:55 p.m.
CVE-2012-4177
ubisoft
uplay pc
web browser plugin
cve-2012-4177
remote code execution
security vulnerability
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
Low
0.853 High
EPSS
Percentile
98.6%
The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbit_exe_path command line argument.
Affected configurations
Node
ubiuplay_pcRange≤2.0.3
ORubiuplay_pcMatch2.0
ORubiuplay_pcMatch2.0.1
ORubiuplay_pcMatch2.0.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubi:uplay_pc | ubi uplay pc | le | 2.0.3 |
| ubi:uplay_pc | ubi uplay pc | eq | 2.0 |
| ubi:uplay_pc | ubi uplay pc | eq | 2.0.1 |
| ubi:uplay_pc | ubi uplay pc | eq | 2.0.2 |
Related
checkpoint_advisories
checkpoint_advisories
Ubisoft Uplay 2.0.3 ActiveX Control Arbitrary Code Execution (CVE-2012-4177)
2013-02-25 00:00:00
prion
prion
Command injection
2012-08-07 20:55:00
cvelist
cvelist
CVE-2012-4177
2012-08-07 20:00:00
nessus
nessus
Ubisoft uPlay < 2.0.4 Browser Plugin RCE
2017-06-21 00:00:00
nvd
nvd
CVE-2012-4177
2012-08-07 20:55:04
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
Low
0.853 High
EPSS
Percentile
98.6%
Related for CVE-2012-4177