CVEvulnerability
CVE-2019-11354
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-04-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-74
Description
The client in Electronic Arts (EA) Origin 10.5.36 on Windows allows template injection in the title parameter of the Origin2 URI handler. This can be used to escape the underlying AngularJS sandbox and achieve remote code execution via an origin2://game/launch URL for QtApplication QDesktopServices communication.
Affected configurations
• ea origin 10.5.36
Related
Weakness · CWE (1)
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness
References
- http://gamasutra.com/view/news/340907/A_nowfixed_Origin_vulnerability_potentially_opened_the_client_to_hackers.php Third Party Advisory
- http://packetstormsecurity.com/files/153375/dotProject-2.1.9-SQL-Injection.html Exploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/153485/EA-Origin-Template-Injection-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry
- https://blog.underdogsecurity.com/rce_in_origin_client/ Broken Link
- https://gizmodo.com/ea-origin-users-update-your-client-now-1834079604 Exploit, Third Party Advisory
- https://techcrunch.com/2019/04/16/ea-origin-bug-exposed-hackers/ Exploit, Third Party Advisory
- https://www.golem.de/news/sicherheitsluecke-ea-origin-fuehrte-schadcode-per-link-aus-1904-140738.html Press/Media Coverage, Third Party Advisory
- https://www.pcmag.com/news/367801/security-flaw-allowed-any-app-to-run-using-eas-origin-clien Press/Media Coverage, Third Party Advisory
- https://www.techradar.com/news/major-security-flaw-found-in-ea-origin-gaming-client Press/Media Coverage, Third Party Advisory
- https://www.thesun.co.uk/tech/8877334/sims-4-battlefield-fifa-origin-hackers/ Press/Media Coverage, Third Party Advisory
- https://www.trustedreviews.com/news/time-update-origin-eas-game-client-security-risk-just-installed-3697942 Third Party Advisory
- https://www.vg247.com/2019/04/17/ea-origin-security-flaw-run-malicious-code-fixed/ Third Party Advisory
- http://gamasutra.com/view/news/340907/A_nowfixed_Origin_vulnerability_potentially_opened_the_client_to_hackers.php Third Party Advisory
- http://packetstormsecurity.com/files/153375/dotProject-2.1.9-SQL-Injection.html Exploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/153485/EA-Origin-Template-Injection-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry
- https://blog.underdogsecurity.com/rce_in_origin_client/ Broken Link
- https://gizmodo.com/ea-origin-users-update-your-client-now-1834079604 Exploit, Third Party Advisory
- https://techcrunch.com/2019/04/16/ea-origin-bug-exposed-hackers/ Exploit, Third Party Advisory
- https://www.golem.de/news/sicherheitsluecke-ea-origin-fuehrte-schadcode-per-link-aus-1904-140738.html Press/Media Coverage, Third Party Advisory
- https://www.pcmag.com/news/367801/security-flaw-allowed-any-app-to-run-using-eas-origin-clien Press/Media Coverage, Third Party Advisory
- https://www.techradar.com/news/major-security-flaw-found-in-ea-origin-gaming-client Press/Media Coverage, Third Party Advisory
- https://www.thesun.co.uk/tech/8877334/sims-4-battlefield-fifa-origin-hackers/ Press/Media Coverage, Third Party Advisory
- https://www.trustedreviews.com/news/time-update-origin-eas-game-client-security-risk-just-installed-3697942 Third Party Advisory
- https://www.vg247.com/2019/04/17/ea-origin-security-flaw-run-malicious-code-fixed/ Third Party Advisory