PT-2025-3424 · Bioware · Dragon Age Origins

Yamerooo123 · Published 2025-01-27 · Updated 2025-01-27 · CVE-2024-57276

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Dragon Age Origins version 1.05

Description The DAUpdaterSVC service in Dragon Age Origins contains an unquoted service path issue, allowing users to modify the executable file path used by the service. This service runs with NT AUTHORITYSYSTEM privileges, enabling attackers to escalate privileges by replacing or placing a malicious executable in the service path.

Recommendations For Dragon Age Origins version 1.05, consider restricting access to the DAUpdaterSVC service to minimize the risk of exploitation. As a temporary workaround, avoid using the service until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2024-57276

Affected Products

Dragon Age Origins

References · 4

• 🔥 https://github.com/yamerooo123/CVE/blob/main/CVE-2024-57276/Description.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-57276 · Security Note
• https://github.com/yamerooo123/ResearchNBugBountyEncyclopedia/blob/main/Researches/Dragon%20Age%20Origins/Description.md · Note
• https://twitter.com/CVEnew/status/1883920673036517522 · Twitter Post