PT-2014-6483 · Ubisoft · Uplay

Gjoko Krstic · Published 2014-08-25 · Updated 2014-08-26 · CVE-2014-5453

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ubisoft Uplay PC versions prior to 4.6.1.3217

Description The issue allows local users to gain privileges via a Trojan horse file due to weak permissions set for the program installation directory.

Recommendations For versions prior to 4.6.1.3217, update to version 4.6.1.3217 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-5453

Affected Products

Uplay

References · 5

• 🔥 https://exploit-db.com/exploits/33961 · Exploit
• 🔥 http://exploit-db.com/exploits/33961 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-5453 · Security Note
• http://osvdb.org/show/osvdb/108726 · Note
• http://zeroscience.mk/en/vulnerabilities/ZSL-2014-5191.php · Note