
[UPDATE] The exploit has been patched.
“We have made a forced patch to correct the flaw in the browser plug-in for the Uplay PC application that was brought to our attention earlier today. We recommend that all Uplay users update their Uplay PC application without a Web browser open. This will allow the plug-in to update correctly. An updated version of the Uplay PC installer with the patch also is available from Uplay.com.
Ubisoft takes security issues very seriously, and we will continue to monitor all reports of vulnerabilities within our software and take swift action to resolve such issues.”
[Original Story] What does this have to do with MMO Fallout? Nothing, admittedly. Rock Paper Shotgun is currently reporting on an extremely dangerous exploit in a handful of Ubisoft titles, specifically those that make use of the Uplay DRM. While the exploit has not been 100% confirmed, a vulnerability has been discovered which allows a website to pull up the Uplay window and install anything to its hearts content. Essentially a hijacked website could load up a user’s computer with viruses, key loggers, trojan horses, or other destructive software. According to the article, this exploit can also be accomplished via a simple email.
As the article also points out, this is not a rootkit, the exploit is in the browser plugin. If you want to lean on the side of extra security, you may want to uninstall the games completely. The (incomplete) list of affected games is below:
Assassin’s Creed II
Assassin’s Creed: Brotherhood
Assassin’s Creed: Project Legacy
Assassin’s Creed Revelations
Assassin’s Creed III
Beowulf: The Game
Brothers in Arms: Furious 4
Call of Juarez: The Cartel
Driver: San Francisco
Heroes of Might and Magic VI
Just Dance 3
Prince of Persia: The Forgotten Sands
Pure Football
R.U.S.E.
Shaun White Skateboarding
Silent Hunter 5: Battle of the Atlantic
The Settlers 7: Paths to a Kingdom
Tom Clancy’s H.A.W.X. 2
Tom Clancy’s Ghost Recon: Future Soldier
Tom Clancy’s Splinter Cell: Conviction
Your Shape: Fitness Evolved
(Source: Rock Paper Shotgun)