14 DAY TRIAL // Video game publisher Ubisoft has acknowledged and patched a problem with its Uplay PC service which would have allowed an attacker to use a browser plug-in in order to gain access to the user’s computer.
The problem was discovered yesterday and it is one of the most significant breaches linked to PC gaming in the last few years.
The statement from the company reads, “We have made a forced patch to correct the flaw in the browser plug-in for the uPlay PC application that was brought to our attention earlier today. We recommend that all Uplay users update their Uplay PC application without a Web browser open. This will allow the plug-in to update correctly.”
It adds, “An updated version of the Uplay PC installer with the patch also is available from Uplay.com”, the statement continued, “Ubisoft takes security issues very seriously, and we will continue to monitor all reports of vulnerabilities within our software and take swift action to resolve such issues.”
The list of games that came packaged with the Ubisoft service and might put the player at risk includes:
Assassin’s Creed II Assassin’s Creed: Brotherhood Assassin’s Creed: Project Legacy Assassin’s Creed Revelations Beowulf: The Game Brothers in Arms: Furious 4 Call of Juarez: The Cartel Driver: San Francisco Heroes of Might and Magic VI Just Dance 3 Prince of Persia: The Forgotten Sands Pure Football R.U.S.E. Shaun White Skateboarding Silent Hunter 5: Battle of the Atlantic The Settlers 7: Paths to a Kingdom Tom Clancy’s H.A.W.X. 2 Tom Clancy’s Ghost Recon: Future Soldier Tom Clancy’s Splinter Cell: Conviction Your Shape: Fitness Evolved
Uplay allows gamers to update leaderboards, track in-game Achievements, use cloud saves while the publisher relies on it to limit the impact of piracy.
Ubisoft has been plagued by many other problems linked to Uplay, including significant periods of downtime, the most recent of them during the Steam Summer Sale.