CVE-2019-12828
N/A
Published: June 14, 2019 at 07:53 PM UTC
Updated: June 17, 2026 at 02:15 AM UTC
1 product affected across 1 vendorOrigin
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 13%
Description
An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and origin2:// URI schemes, it is possible to inject additional arguments into the Origin process and ultimately leverage code execution by loading a backdoored Qt plugin remotely via the platformpluginpath argument supplied with a Windows network share.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.
References (5)
x_refsource_MISCExploitPress/Media CoverageThird Party Advisory
Source: [email protected]
https://www.bleepingcomputer.com/news/security/qt5-based-gui-apps-susceptible-to-remote-code-execution/x_refsource_MISCExploitThird Party Advisory
Source: [email protected]
https://www.youtube.com/watch?v=E9vCx9KsF3cx_refsource_MISCExploitThird Party Advisory
Source: [email protected]
https://zeropwn.github.io/2019-05-22-fun-with-uri-handlers/Quick Info
StatusMODIFIED
CWE
CWE-19
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card