high7.2Public exploit code
CVE-2014-5453
Ubisoft Uplay PC before 4.6.1.3217 use weak permissions (Everyone: Full Control) for the program installation directory (%PROGRAMFILES%\Ubisoft Game Launcher),…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ubisoft Uplay 4.6 - Insecure File Permissions Privilege Escalation2014-07-03 · local · windows · Verified
Impact
Ubisoft Uplay PC before 4.6.1.3217 use weak permissions (Everyone: Full Control) for the program installation directory (%PROGRAMFILES%\Ubisoft Game Launcher), which allows local users to gain privileges via a Trojan horse file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ubi | Uplay Pc | through 4.6.3208 Version 4.5.2.3010 |