CVE-2018-15832

HIGH

Ubisoft Uplay Desktop Client 63.0.5699.0 - Remote Code Execution

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2018-15832 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit.

Description

upc.exe in Ubisoft Uplay Desktop Client versions 63.0.5699.0 allows remote attackers to execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of URI handlers. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current process.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBUbisoft Uplay Desktop Client 63.0.5699.0 - Remote Code ExecutionExploitDB exploitby Che-Chun KuoNot analyzed1 file
ExploitDB
PoC details

References

2