CVE-2012-4177: Improper Neutralization of Special Elements used in an OS Command

The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbitexepath command line argument...