CVE-2019-12828 : Security Advisory and Response

A vulnerability has been found in Electronic Arts Origin versions prior to 10.5.39, allowing for remote code execution by exploiting inadequate sanitization of URI schemes.

Understanding CVE-2019-12828

This CVE identifies a security flaw in Electronic Arts Origin that enables the execution of arbitrary code through a specific manipulation of URI schemes.

What is CVE-2019-12828?

The vulnerability in Electronic Arts Origin versions before 10.5.39 stems from insufficient sanitization of the origin:// and origin2:// URI schemes. This flaw permits the injection of additional arguments into the Origin process, facilitating the execution of arbitrary code by remotely loading a Qt plugin containing a backdoor.

The Impact of CVE-2019-12828

Exploiting this vulnerability allows threat actors to execute malicious code on a target system by leveraging a Windows network share and manipulating the platformpluginpath argument.

Technical Details of CVE-2019-12828

This section delves into the technical aspects of the vulnerability.

Vulnerability Description

The vulnerability arises from the improper sanitization of URI schemes in Electronic Arts Origin, enabling the injection of supplementary arguments into the process.

Affected Systems and Versions

Electronic Arts Origin versions prior to 10.5.39 are affected by this vulnerability.

Exploitation Mechanism

Attackers can exploit this flaw by remotely loading a Qt plugin with a backdoor using the platformpluginpath argument via a Windows network share.

Mitigation and Prevention

Protecting systems from CVE-2019-12828 requires immediate actions and long-term security practices.

Immediate Steps to Take

Update Electronic Arts Origin to version 10.5.39 or later to mitigate the vulnerability.
Avoid clicking on suspicious links or downloading files from untrusted sources.

Long-Term Security Practices

Regularly update software and applications to patch known vulnerabilities.
Implement network segmentation and access controls to limit the impact of potential attacks.

Patching and Updates

Apply security patches and updates provided by Electronic Arts to address this vulnerability.