Origin exploit discovered, allows EA store to launch malicious code

[V_R]

EA's online game store Origin has been hacked to run malicious code. The exploit was discovered by third-party security company ReVuln while running tests on the software.
It allows a malicious user to swap links that launch already-downloaded games with those for alternatives.
There's no evidence the loophole has yet been identified or exploited by anyone else, BBC News reported.
"The Origin platform allows malicious users to exploit local vulnerabilities or features by abusing the Origin URI handling mechanism," ReVuln researchers Donato Ferrante and Luigi Auriemma wrote in a paper identifying the issue.

"In other words, an attacker can craft a malicious internet link to execute malicious code remotely on [a] victim's system, which has Origin installed."
ReVuln has published a more detailed explanation of how someone could manipulate the code, along with information on what EA should do to combat it.
In the meantime, players can avoid the issue by only launching Origin games directly through the service, rather than via desktop shortcuts.
EA has said it is "investigating" the vulnerability.
News of the security thread comes at a torrid time for EA. Company boss John Riccitiello announced his departure last night after weaker-than-expected financial results and a fortnight of embarrassment surrounding the launch of SimCity.

http://www.eurogamer.net/articles/2...ered-allows-ea-store-to-launch-malicious-code

 

[xGBHxPegasus]

Does anyone actually use Desktop Shortcuts for games?

I just always use Origin and click play from there.

 

[arknor]

http://www.pcworld.com/article/2012...e-abused-to-exploit-game-vulnerabilities.html

steam had the same thing just a few months ago before the origin haters start

 

[V_R]

I only play BF3 via Origin so i use Battlelog. I hate desktop shortcuts!

 

[Kosmiche]

I don't put game shortcuts on my desktop, I find it a bit sad tbh.

 

[Conscript]

I don't put game shortcuts on my desktop, I find it a bit sad tbh.

I use desktop short cuts for some games, because I often find that launching a game from a client doesn't activate the gamer profiles for my mouse - they are bound to launch detection of an application and activate the right profile. But they usually only work when launching from a shortcut.

 

[francky]

I don't put game shortcuts on my desktop, I find it a bit sad tbh.

Putting a shortcut on your desktop is sad?? Care to elaborate?

 

[robin66]

Desk short cuts are really handy for your currently played games.

All with in moderation how ever. It's no good having them all plastered over your desktop.

 

[Scougar]

.... I find it a bit sad tbh.

Did you really just say that?

I don't have shortcuts on my desktop for Origin, but have the odd shortcut on my desktop for my fav games.

 

[Darujhistan]

I don't put game shortcuts on my desktop, I find it a bit sad tbh.

What's sad about it?

 

[Howitzer]

I keep desktop shortcuts for my most commonly played games :S

Only have a few on there at any one time, not the whole lot haha!

then again, I don't even keep all my games installed, only the more common or smallest file size ones.

 

[MatTheCat]

Putting a shortcut on your desktop is sad?? Care to elaborate?

He is just probably one of these people who thinks everything is sad. Shopping in supermarkets, eating, wiping your arse, breathing oxygen....

.....dont worry about him.

 

[francky]

He is just probably one of these people who thinks everything is sad. Shopping in supermarkets, eating, wiping your arse, breathing oxygen....

.....dont worry about him.

Ha ha yeah probably!

I just don't understand how any person could come to that conclusion? lol

 

[Omaeka]

I love the title of this thread, makes it sound like EA themselves are launching attacks on the consumers computers! Very well worded.

 

[IRLeetly]

I love the title of this thread, makes it sound like EA themselves are launching attacks on the consumers computers! Very well worded.

Origin is self aware!