CVE-2019-12828
High
Description
An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and origin2:// URI schemes, it is possible to inject additional arguments into the Origin process and ultimately leverage code execution by loading a backdoored Qt plugin remotely via the platformpluginpath argument supplied with a Windows network share.
SeverityHigh
CVSS8.8
Exploit probability—
ProductEa Origin
PublishedJun 14, 2019
First seenJun 14, 2019
How to fix
Update
- ea origin10.5.39 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ea origin | v < 10.5.39 | 10.5.39 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.