CVE-2012-4177
Ubisoft Uplay PC < 2.0.4 - Remote Code Execution via -orbit_exe_path Argument
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-4177.
PoCs published by Metasploit, including Metasploit module exploits/windows/browser/ubisoft_uplay_cmd_exec.
AI-analyzed exploit summary This Metasploit module exploits CVE-2012-4177, a vulnerability in Ubisoft uplay 2.0.3 ActiveX control, allowing arbitrary code execution via a malicious WebDAV server. The exploit serves a crafted HTML page that triggers the vulnerability when visited by a vulnerable client.
Description
The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbit_exe_path command line argument.
Exploits (2)
This Metasploit module exploits CVE-2012-4177, a vulnerability in Ubisoft uplay 2.0.3 ActiveX control, allowing arbitrary code execution via a malicious WebDAV server. The exploit serves a crafted HTML page that triggers the vulnerability when visited by a vulnerable client.
This Metasploit module exploits a vulnerability in Ubisoft uplay 2.0.3 ActiveX control to achieve arbitrary code execution. It uses a WebDAV server to serve a malicious executable and triggers the vulnerability via a crafted HTML page with an embedded ActiveX object.