|CVSS SCORE||8.8, (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Electronic Arts Origin. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page.
There is an issue with the way the product handles URIs within certain schemes. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the current user at medium integrity.
Fixed in version 10.5.38.26728 (PC) and 10.5.39.26720 (Mac)
|CREDIT||Ron Waisberg of Trend Micro Security Research