Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2018-15832

EPSS 1.53% · P81
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2018-15832

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
upc.exe in Ubisoft Uplay Desktop Client versions 63.0.5699.0 allows remote attackers to execute arbitrary code. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of URI handlers. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current process.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Ubisoft Uplay Desktop Client 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ubisoft Uplay Desktop Client是法国育碧娱乐（Ubisoft Entertainment）软件公司的一套游戏平台的桌面客户端应用程序。该平台包含了PC游戏大厅和在线销售平台，支持PC玩家以此为大厅彼此连结，进行各种游戏间的互动，并提供玩家线上的游戏销售服务。 Ubisoft Uplay Desktop Client 63.0.5699.0版本中的upc.exe文件存在安全漏洞，该漏洞源于程序在使用用户提交的字符串执行系统调用之前，没有对其进行验证。远程攻击者可借助恶意的页面或文件
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2018-15832

#POC DescriptionSource LinkShenlong Link
1CVE-2018-15832https://github.com/JacksonKuo/Ubisoft-Uplay-Desktop-Client-63.0.5699.0POC Details
2CVE-2018-15832https://github.com/JacksonKuo/ubisoft-uplay-desktop-client-63.0.5699.0POC Details
3CVE-2018-15832https://github.com/anon135792408/Ubisoft-Uplay-Desktop-Client-63.0.5699.0POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2018-15832

请登录查看更多情报信息。

Same Patch Batch · n/a · 2018-09-20 · 15 CVEs total

CVE-2018-17233HDF5 安全漏洞
CVE-2018-17234HDF5 安全漏洞
CVE-2018-17235libmp4v2 缓冲区错误漏洞
CVE-2018-17236libmp4v2 安全漏洞
CVE-2018-17237HDF5 安全漏洞
CVE-2018-17232docmarionum1 Slack ArchiveBot SQL注入漏洞
CVE-2018-17243ZOHO ManageEngine OpManager Global Search SQL注入漏洞
CVE-2017-18301多款Qualcomm产品安全漏洞
CVE-2018-17254Joomla! JCK Editor组件SQL注入漏洞
CVE-2018-6501Micro Focus ArcSight Management Center 安全漏洞
CVE-2018-14592Joomla! CWJoomla CW Article Attachments SQL注入漏洞
CVE-2018-16282Moxa EDR-810 命令注入漏洞
CVE-2018-16752LINK-NET LW-N605R 安全漏洞
CVE-2018-17282Exiv2 安全漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2018-15832

No comments yet

Leave a comment