RULE(RULE ID:310136)

Rule General Information
Release Date: 2016-01-19
Rule Name: WEB-ACTIVEX Ubisoft Uplay 2.0.3 Activex Control Arbitrary Code Execution Vulnerability (CVE-2012-4177)
Severity:
CVE ID:
Rule Protection Details
Description: The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -orbit_exe_path command line argument.
Impact: An attacker can execute arbitrary code via a successful exploit in the context of the vulnerable software.
Affected OS: Windows
Reference: ExploitDB:20321
Solutions
The vendor has updated advisory on its official website. Please check it for more information.