CVE-2014-5453

Ubisoft Uplay PC before 4.6.1.3217 use weak permissions Everyone: Full Control for the program installation directory %PROGRAMFILES%\Ubisoft Game Launcher, which allows local users to gain privileges via a Trojan horse file...

Design/Logic Flaw

Ubisoft Uplay PC before 4.6.1.3217 use weak permissions Everyone: Full Control for the program installation directory %PROGRAMFILES%\Ubisoft Game Launcher, which allows local users to gain privileges via a Trojan horse file...

CVE-2014-5453: Undefined Security Weakness

Ubisoft Uplay PC before 4.6.1.3217 use weak permissions Everyone: Full Control for the program installation directory %PROGRAMFILES%\Ubisoft Game Launcher, which allows local users to gain privileges via a Trojan horse file...

PT-2014-6483

Name of the Vulnerable Software and Affected Versions Ubisoft Uplay PC versions prior to 4.6.1.3217 Description The issue allows local users to gain privileges via a Trojan horse file due to weak permissions set for the program installation directory. Recommendations For versions prior to...

Ubisoft Uplay 4.6 - Insecure File Permissions Local Privilege Escalation

No description provided by source. Ubisoft Uplay 4.6 Insecure File Permissions Local Privilege Escalation Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 4.6.3208 PC 4.5.2.3010 PC Summary: Uplay is a digital distribution, digital rights management,...

Ubisoft Uplay 4.6 Insecure File Permissions Local Privilege Escalation

Ubisoft Uplay 4.6 Insecure File Permissions Local Privilege Escalation Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 4.6.3208 PC 4.5.2.3010 PC Summary: Uplay is a digital distribution, digital rights management, multiplayer and communications service...

Ubisoft Uplay 4.6 - Insecure File Permissions Local Privilege Escalation

Uplay for PC suffers from an elevation of privileges vulnerability which can be used by a simple user that can change the executable file with a binary of choice. The vulnerability exist due to the improper permissions, with the 'F' flag Full for 'Everyone' group, making the entire directory...

Ubisoft Uplay 4.6 - Insecure File Permissions Privilege Escalation

Ubisoft Uplay 4.6 - Insecure File Permissions Privilege Escalation Ubisoft Uplay 4.6 Insecure File Permissions Local Privilege Escalation Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 4.6.3208 PC 4.5.2.3010 PC Summary: Uplay is a digital distribution,...

Ubisoft Uplay 2.0.3 ActiveX Control Arbitrary Code Execution (CVE-2012-4177)

A remote code execution vulnerability exists in Ubisoft Uplay 2.0.3. The vulnerability is due to insufficient verification of a command path parameter value when parsing a Uplay ActiveX object. A remote attacker can exploit this vulnerability by enticing a user to open a webpage that contains a...

CVE-2012-4177

The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbitexepath command line argument...

Command injection

The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbitexepath command line argument...

CVE-2012-4177

The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbitexepath command line argument...

Ubisoft uplay 2.0.3 Active X Control Arbitrary Code Execution

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

CVE-2012-4177: Improper Neutralization of Special Elements used in an OS Command

The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbitexepath command line argument...