Ubisoft.Uplay.Desktop.Client.Remote.Code.Execution

Description

This indicates an attack attempt to exploit an Remote Code Execution Vulnerability in Ubisoft Uplay Desktop Client.
The vulnerability is due to an error when the vulnerable software attempts to handle a maliciously crafted web page. An attacker can exploit this by tricking a user into visiting a malicious web page and execute arbitrary code within the context of the application.

Affected Products

Ubisoft Uplay Desktop Client versions 63.0.5699.0

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Refer to the vendor's advisory for updates:
https://forums.ubi.com/showthread.php/1912340-Uplay-PC-Client-July-17th-2018

References