Lucene search
MitreCVELIST:CVE-2019-11354HistoryApr 19, 2019 - 9:29 p.m.
CVE-2019-11354
2019-04-1921:29:05
mitre
raw.githubusercontent.com
1
The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler. This can be used to escape the underlying AngularJS sandbox and achieve remote code execution via an origin2://game/launch URL for QtApplication QDesktopServices communication.
Related
prion
prion
Remote code execution
2019-04-19 22:29:00
zdt
zdt
dotProject 2.1.9 - SQL Injection Vulnerability
2019-06-26 00:00:00
EA Origin < 10.5.38 - Remote Code Execution Vulnerability
2019-06-22 00:00:00
cve
cve
CVE-2019-11354
2019-04-19 22:29:00
checkpoint_advisories
checkpoint_advisories
Electronic Arts Origin Client Remote Code Injection (CVE-2019-11354)
2020-03-05 00:00:00
packetstorm
packetstorm
EA Origin Template Injection Remote Code Execution
2019-07-01 00:00:00
dotProject 2.1.9 SQL Injection
2019-06-24 00:00:00
EA Origin Remote Code Execution
2019-06-21 00:00:00
myhack58
myhack58
exploitpack
exploitpack
EA Origin 10.5.38 - Remote Code Execution
2019-06-21 00:00:00
exploitdb
exploitdb
EA Origin < 10.5.38 - Remote Code Execution
2019-06-21 00:00:00