Skip to main content
← Back to Advisories

EA Origin Remote Command Execution

HIGH CVE-2019-11354
Dominik Penner's profile picture

Dominik Penner @zer0pwn

DESCRIPTION

A critical vulnerability in EA Origin allows remote command execution through the origin:// protocol handler.

DETAILS

EA Origin contains a critical vulnerability in its URL protocol handler that allows remote command execution. An attacker could craft a malicious origin:// URL that, when clicked, would execute arbitrary commands on the system.

AFFECTING

  • EA Origin • 10.5.39