BetweenAnthem , multiplerounds of layoff , andall the troublethe publisher has had with various Star Wars game lately , EA has had a reasonably rocky last 12 months . But oddly , a recent microbe with its Origin game client might be one of the company ’s most serious issuing yet .
That ’s because due to a surety flaw in the Windows rendering of Origin , it was possible for hackers to basically run or instal any program program on a user ’s computer through something as innocuous as a hyperlink .
detect by Daley Bee and Dominik Penner ofUnderdog Security(via TechCrunch ) , the germ of the flaw came from EA ’s utilisation of a custom URL protocol that allowed gamers to access a secret plan ’s web storehouse from a browser app alternatively of using the Origin client . Unfortunately , because those “ origin:// ” link could also be tricked into launching malicious software , it essentially leave drudge free rein to put in almost any program onto an end user ’s machine .
Image: (EA)
grant to Bee , by combining a malicious computer code with a cross - site scripting exploit , malware could be sent and automatically put in on vulnerable systems simply by clicking a tie-in . And to prove the existence of the flaw , the squad at Underdog protection even created ademo exploitthat open up up the Windows Calculator app instead of a tie-in in Origin that appear to be an EA sales event fling .
gratefully , the exploit has been addressed in the most recent spot for Origin , so to touch on the issue , all you have to do is refresh your Origin plot client . For any Origin client exploiter on Mac , the salutary news is that the subject plainly only affected the Windows version of Origin . But there ’s no reason you should n’t keep your software updated .
And while it ’s undecipherable if any substance abuser were in reality attacked using the flaw , just the presence of an effort this serious in Origin is still a bit of a vexation . Maybe EA should care less about microtransactions and centre more on QA , as it seems both Origin and Anthem have been in need of some additional technological assistance .
[ TechCrunch ]
Consumer TechGamesGamingPC GamingSecurity
Daily Newsletter
Get the better tech , skill , and polish intelligence in your inbox daily .
News from the time to come , delivered to your present tense .
You May Also Like
