CVE-2019-12828

An issue was discovered in Electronic Arts Origin before 10.5.39

published June 14, 2019

CVSS
—
EPSS
13%
Percentile
96.4
In the wild
Unconfirmed
What it is

An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and origin2:// URI schemes, it is possible to inject additional arguments into the Origin process and ultimately leverage code execution by loading a backdoored Qt plugin remotely via the platformpluginpath argument supplied with a Windows network share.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13274 · 96.4th percentile
Published
2019-06-14T19:53Z
EPSS history
Timeline
  • 14 JUN 19:53Z
    An issue was discovered in Electronic Arts Origin before 10.5.39
    cvelistv5