EA’s Origin store contains a vulnerability that potentially allows an attacked to substitute valid product links with unsafe alternatives. The exploit has been found by security researchers and seems yet untapped and only affects already downloaded games. Launching games through the service instead of desktop links should mitigate the issue.
“The Origin platform allows malicious users to exploit local vulnerabilities or features by abusing the Origin URI handling mechanism,” according to Donato Ferrante and Luigi Auriemma, the ReVuln researchers who found the exploit .
“In other words, an attacker can craft a malicious internet link to execute malicious code remotely on [a] victim’s system, which has Origin installed.”
Source ReVuln Paper, BBC News
Filed Under: Gaming News, Technology News