uPlay patch released, Ubi issues statement
Publisher "takes security issues very seriously"
It emerged earlier today that a security vulnerability had been uncovered in uPlay which could potentially allow websites to remotely take control of your PC.
Ubisoft has quickly put together and released a fix patch, and spoken out on the matter for the first time, warning users to quickly install its now-released update and that it's keeping a close eye on things.
"We have made a forced patch to correct the flaw in the browser plug-in for the uPlay PC application that was brought to our attention earlier today," said Ubisoft.
"We recommend that all uPlay users update their uPlay PC application without a Web browser open. This will allow the plug-in to update correctly. An updated version of the uPlay PC installer with the patch also is available from uPlay.com."
It went on, "Ubisoft takes security issues very seriously, and we will continue to monitor all reports of vulnerabilities within our software and take swift action to resolve such issues."
It's an uninformative response - there's no information on how the exploit came about or how it may have affected users, and nothing on what the update does and how it fixes the issue.
IT experts told CVG that the exploit was an unintentional security vulnerability, as opposed to an intentional backdoor left in the system, but did however, allow for "functionality in the uPlay browser extension, that normally enables games to be launched from a web browser, [to] be used to launch any other program on the system".
Fonte:
CVG.com
