Ubisoft Uplay PC before 4.6.1.3217 use weak permissions (Everyone: Full...

7.2 CVSS

Vulnerability Description

Ubisoft Uplay PC before 4.6.1.3217 use weak permissions (Everyone: Full Control) for the program installation directory (%PROGRAMFILES%\Ubisoft Game Launcher), which allows local users to gain privileges via a Trojan horse file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-5453

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from ubi

View All →

CVE-2014-4334

Stack-based buffer overflow in Ubisoft Rayman Legends before 1.3.140380 allows...

High 7.5

CVE-2012-4177

The web browser plugin for Ubisoft Uplay PC before 2.0.4...

Critical 10

Affected Vendor

ubi

View all reports →

Affected Software

uplay pc

Vulnerable Versions:

0, 4.5.2.3010

Timeline

Official Publish: August 25th, 2014

Last Modified: September 17th, 2024

Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.