Ubisoft uplay 2.0.3 Active X Control Arbitrary Code Execution

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

CVE-2012-4177: Improper Neutralization of Special Elements used in an OS Command

The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbitexepath command line argument...

PT-2012-5221

Name of the Vulnerable Software and Affected Versions Uplay PC versions prior to 2.0.4 Description The issue allows remote attackers to execute arbitrary programs. This is achieved via the orbit exe path command line argument in the web browser plugin for Ubisoft Uplay PC. Recommendations For...

Ubisoft uplay 2.0.3 Active X Control Arbitrary Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Ubisoft uplay 2.0.3 Active X Control...

Ubisoft uplay 2.0.3 ActiveX Control Arbitrary Code Execution

The uplay ActiveX component allows an attacker to execute any command line action. User must sign in, unless auto-sign in is enabled and uplay must not already be running. Due to the way the malicious executable is served WebDAV, the module must be run on port 80, so please make sure you have...