EA Origin game service platform Arbitrary Code Execution Vulnerability

Release date:
Updated on: 2013-03-20

Affected Systems:
Origin Origin
Description:
--------------------------------------------------------------------------------
EA Origin is an online game platform.
 
EA Origin has a security vulnerability in the URI processing mechanism, which allows attackers to remotely execute malicious code on the player's computer.
 
<* Source: ReVuln

Link: http://arstechnica.com/security/2013/03/bug-on-eas-origin-game-platform-allows-attackers-to-hijack-player-pcs/
*>

Suggestion:
--------------------------------------------------------------------------------
Temporary solution:
 
If you cannot install or upgrade the patch immediately, NSFOCUS recommends that you take the following measures to reduce the threat:
 
* Make sure there is a prompt before processing the origin: // link.
 
Vendor patch:
 
Origin
------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:
 
Https://www.origin.com/ie/download