PT-2014-6483 · Ubisoft · Uplay

Gjoko Krstic · Publicado 2014-08-25 · Atualizado 2014-08-26 · CVE-2014-5453

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ubisoft Uplay PC versions prior to 4.6.1.3217

Description The issue allows local users to gain privileges via a Trojan horse file due to weak permissions set for the program installation directory.

Recommendations For versions prior to 4.6.1.3217, update to version 4.6.1.3217 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-5453

Produtos afetados

Uplay

Referências · 5

• 🔥 https://exploit-db.com/exploits/33961 · Exploit
• 🔥 http://exploit-db.com/exploits/33961 · Exploit
• http://osvdb.org/show/osvdb/108726 · Nota
• http://zeroscience.mk/en/vulnerabilities/ZSL-2014-5191.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-5453 · Nota de Segurança