CVE-2014-5453

Ubisoft Uplay PC before 4.6.1.3217 use weak permissions Everyone: Full Control for the program installation directory %PROGRAMFILES%\Ubisoft Game Launcher, which allows local users to gain privileges via a Trojan horse file...

Design/Logic Flaw

Ubisoft Uplay PC before 4.6.1.3217 use weak permissions Everyone: Full Control for the program installation directory %PROGRAMFILES%\Ubisoft Game Launcher, which allows local users to gain privileges via a Trojan horse file...

CVE-2014-5453

Ubisoft Uplay PC before 4.6.1.3217 use weak permissions Everyone: Full Control for the program installation directory %PROGRAMFILES%\Ubisoft Game Launcher, which allows local users to gain privileges via a Trojan horse file...

CVE-2012-4177

The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbitexepath command line argument...

Command injection

The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbitexepath command line argument...

CVE-2012-4177

The CVE-2012-4177 issue affects Ubisoft Uplay PC before 2.0.4, arising from the web browser plugin’s handling of the -orbit_exe_path argument. A remote, unauthenticated attacker could lure a user to a crafted webpage to trigger arbitrary code execution via the ActiveX/plugin, as documented by mul...

CVE-2012-4177

The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbitexepath command line argument...