CVE-2012-4177

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 58.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-08-07 · updated 2026-06-16
Weakness: CWE-78

Description

The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbit_exe_path command line argument.

Affected products

Ubi Uplay Pc: through 2.0.3; 2.0, 2.0.1, 2.0.2

References

http://forums.ubi.com/showthread.php/699940-Uplay-PC-Patch-2-0-4-Security-fix
http://osvdb.org/84402
http://seclists.org/fulldisclosure/2012/Jul/375
http://www.bbc.com/news/technology-19053453
http://www.exploit-db.com/exploits/20321
http://forums.ubi.com/showthread.php/699940-Uplay-PC-Patch-2-0-4-Security-fix
http://osvdb.org/84402
http://seclists.org/fulldisclosure/2012/Jul/375
http://www.bbc.com/news/technology-19053453
http://www.exploit-db.com/exploits/20321

Get alerted when CVE-2012-4177 or the next vulnerability affects your stack