Showing posts with label Tavis Ormandy. Show all posts
Showing posts with label Tavis Ormandy. Show all posts

Monday, July 30, 2012

Plugin Ubisoft leaves computers vulnerable, says Google engineer

 http://i.imgur.com/52pxv.jpg


The information security engineer at Google, Tavis Ormandy noticed a security flaw in Uplay, plugin Ubisoft that comes along with various securities of the company.

The extension allows you to embed malicious code on any site, causing the charge by the page able to install software on a victim's PC without asking permission.

In Seclists , discussion forum about security, Ormandy noticed the account that failed to install "Assassin's Creed: Revelations" in his notebook.

There have been no reports of a malicious use of the fault, but the magazine Forbes confirms that the gap is present in browsers Google Chrome, Opera, Mozilla Firefox and Internet Explorer.

Sought by the team of Digital Look, a spokesperson for Ubisoft in Brazil said the company has not yet ruled on the matter.