Skip to main content
← Back to Advisories

EA Origin Remote Command Execution

HIGH CVE-2019-12828
Dominik Penner's profile picture

Dominik Penner @zer0pwn

DESCRIPTION

Another critical vulnerability in EA Origin enables remote command execution through malicious game URLs.

DETAILS

EA Origin contains another critical vulnerability that allows remote command execution through specially crafted game URLs. An attacker could create a malicious URL that, when processed by the Origin client, would execute arbitrary commands on the system.

AFFECTING

  • EA Origin • 10.5.39