CVE-2014-5453

2014-08-2516:00:00

mitre

www.cve.org

ubisoft

uplay pc

directory permissions

local privilege escalation

cve-2014-5453

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

26.8%

JSON

Ubisoft Uplay PC before 4.6.1.3217 use weak permissions (Everyone: Full Control) for the program installation directory (%PROGRAMFILES%\Ubisoft Game Launcher), which allows local users to gain privileges via a Trojan horse file.

References

osvdb.org/show/osvdb/108726

www.exploit-db.com/exploits/33961

www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5191.php