Major security hole in Uplay

May put your PC at risk.
Text: GR Staff
Published 2012-07-30

Ubisoft's Uplay, the primarilly serves as a DRM for PC titles, is suffering from a major security hole that can give hackers full access to computers with Uplay installed.

Google's Travis Ormandy was the first to point out the problem, and it has since been confirmed by Rock, Paper, Shotgun among others.

It seems that it's the Uplay browser plug-in that is the cause of the problem. And if you visit a website with malicious code it is possible for the website to send instructions to the computer such as launching programs, and so on.

Rock, Paper, Shotgun, have created a test page where you can test out if your computer is at risk.

According to Rock, Paper, Shotgun the following games are at risk:

Assassin's Creed II
Assassin's Creed: Brotherhood
Assassin's Creed: Project Legacy
Assassin's Creed Revelations
Assassin's Creed III
Beowulf: The Game
Brothers in Arms: Furious 4
Call of Juarez: The Cartel
Driver: San Francisco
Heroes of Might and Magic VI
Just Dance 3
Prince of Persia: The Forgotten Sands
Pure Football
R.U.S.E.
Shaun White Skateboarding
Silent Hunter 5: Battle of the Atlantic
The Settlers 7: Paths to a Kingdom
Tom Clancy's H.A.W.X. 2
Tom Clancy's Ghost Recon: Future Soldier
Tom Clancy's Splinter Cell: Conviction
Your Shape: Fitness Evolved

Now, if you're lucky enough to own Brothers in Arms: Furious 4 I'm sure you can accept a bit of a security hole, eh? There are a few other odd entries in the list as well (Just Dance 3 on PC?!?) But basically if you know you're using Uplay on your computer you may want to de-activate the browser plug-in.

Ubisoft has yet to comment on the situation.

Back