A nasty security hole discovered in Ubisoft’s Uplay browser plugin could let naughty people run commands and programs on your PC simply with a few lines of code stuck into a webpage. And you may have the plugin installed without knowing it.
A nasty security hole discovered in Ubisoft’s Uplay browser plugin could let naughty people run commands and programs on your PC simply with a few lines of code stuck into a webpage. And you may have the plugin installed without knowing it.
Ahh always online DRM. Sounds like a good idea doesn’t it? Actually, no it doesn’t! It is a horrible idea and one that Ubisoft seem to be clinging too!
Now some more problems have surfaced with the Uplay plugin for your browser. “That’s fine”, you may think “I didn’t install that anyway”. Well you’d be wrong because Ubisoft may have done that for you in the background. Any Ubisoft game that uses their draconian DRM will install the plugin for your browser automatically!
Ubisoft have offered a statement
“We have made a forced patch to correct the flaw in the browser plug-in for the Uplay PC application that was brought to our attention earlier today. We recommend that all Uplay users update their Uplay PC application without a Web browser open. This will allow the plug-in to update correctly. An updated version of the Uplay PC installer with the patch also is available from Uplay.com.
“Ubisoft takes security issues very seriously, and we will continue to monitor all reports of vulnerabilities within our software and take swift action to resolve such issues.”
“Ubisoft takes security issues very seriously, and we will continue to monitor all reports of vulnerabilities within our software and take swift action to resolve such issues.”
How about just removing the DRM please Ubisoft. It is more trouble than its worth and just punishes legitimate buyers while pirates with illegitimate copies can play without problem.
Check out the source for more details on how to check if this piece of filth is on your machine and how to disable it! A patch can be downloaded from UPlay.
Shame Ubisoft, shame!
Source: www.shacknews.com
