CVE Vulnerabilities

CVE-2014-5453

Published: Aug 25, 2014 | Modified: Aug 26, 2014
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Ubisoft Uplay PC before 4.6.1.3217 use weak permissions (Everyone: Full Control) for the program installation directory (%PROGRAMFILES%Ubisoft Game Launcher), which allows local users to gain privileges via a Trojan horse file.

Affected Software

Name Vendor Start Version End Version
Uplay_pc Ubi * 4.6.3208 (including)
Uplay_pc Ubi 4.5.2.3010 (including) 4.5.2.3010 (including)

References