CVE-2019-11354

Description

References

• gamasutra.com/view/news/340907/A_nowfixed_Origin_vulnerability_potentially_opened_the_client_to_hackers.php · Third Party Advisory
• packetstormsecurity.com/files/153375/dotProject-2.1.9-SQL-Injection.html · Exploit
• packetstormsecurity.com/files/153485/EA-Origin-Template-Injection-Remote-Code-Execution.html · Exploit
• blog.underdogsecurity.com/rce_in_origin_client · Broken Link
• gizmodo.com/ea-origin-users-update-your-client-now-1834079604 · Exploit
• techcrunch.com/2019/04/16/ea-origin-bug-exposed-hackers · Exploit
• golem.de/news/sicherheitsluecke-ea-origin-fuehrte-schadcode-per-link-aus-1904-140738.html · Press/Media Coverage
• pcmag.com/news/367801/security-flaw-allowed-any-app-to-run-using-eas-origin-clien · Press/Media Coverage
• techradar.com/news/major-security-flaw-found-in-ea-origin-gaming-client

origin의 다른 취약점

• CVE-2020-27708높음 7.8A vulnerability exists in the Origin Client that could allow a non-Administrative user to elevate their access to either Administrator or Sy…
• CVE-2019-19741높음 7.8Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation, a different i…
• CVE-2019-19248높음 7.8Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 2 of 2).
• CVE-2019-19247높음 7.8Electronic Arts Origin through 10.5.x allows Elevation of Privilege (issue 1 of 2).
• CVE-2019-12828높음 8.8An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and origin2:// URI schemes, …