PatchTheCVEubi vulnerabilities
Recent CVEs affecting ubi products. 3 tracked.
ubi has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2014-08-25. Highest priority: CVE-2012-4177 (score 65/100).
- CVE-2014-5453 HIGH 7.2 UPGRADE Ubisoft Uplay PC before 4.6.1.3217 use weak permissions (Everyone: Full Control) for the program installation
- CVE-2014-4334 HIGH 7.5 UPGRADE Stack-based buffer overflow in Ubisoft Rayman Legends before 1.3.140380 allows remote attackers to execute arb
- CVE-2012-4177 HIGH 10.0 UPGRADE The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs
FAQ
How do I fix ubi vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ubi being exploited right now?
None of the tracked ubi CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ubi CVE should I patch first?
CVE-2012-4177 currently ranks highest (65/100): The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs.