Ubisoft moves to patch Uplay security vulnerability
Game developer Ubisoft is advising customers to update their systems following the discovery of a high-profile security vulnerability in the company's Uplay games tool.
Researcher Tavis Ormandy first spotted the flaw, which could potentially allow a third-party to exploit the uPlay service to run arbitrary and potentially malicious applications.
"I noticed the installation procedure creates a browser plugin for it's accompanying Uplay launcher, which grants unexpectedly (at least to me) wide access to websites," Ormandy said in a post to the Full Disclosure security list. "I don't know if it's by design, but I thought I'd mention it here in case someone else wants to look into it."
