Ubisoft Uplay Browser Plugin Deemed A Security Risk, Fix Detailed [Update]
Ubisoft's PC game browser plugin could have security issues according to a report - but it can be disabled.
Published on Jul 30, 2012
Ubisoft has addressed the Uplay plugin concerns via a statement: “We have made a forced patch to correct the flaw in the browser plug-in for the Uplay PC application that was brought to our attention earlier today. We recommend that all Uplay users update their Uplay PC application without a Web browser open. This will allow the plug-in to update correctly. An updated version of the Uplay PC installer with the patch also is available from Uplay.com.
"Ubisoft takes security issues very seriously, and we will continue to monitor all reports of vulnerabilities within our software and take swift action to resolve such issues.”
Ubisoft's Uplay browser plugin has a loophole which could be used to remotely install malicious software according to a report.
If you play the following PC games youi could be affected:
Assassin’s Creed II
Assassin’s Creed: Brotherhood
Assassin’s Creed: Project Legacy
Assassin’s Creed Revelations
Beowulf: The Game
Brothers in Arms: Furious 4
Call of Juarez: The Cartel
Driver: San Francisco
Heroes of Might and Magic VI
Just Dance 3
Prince of Persia: The Forgotten Sands
Shaun White Skateboarding
Silent Hunter 5: Battle of the Atlantic
The Settlers 7: Paths to a Kingdom
Tom Clancy’s H.A.W.X. 2
Tom Clancy’s Ghost Recon: Future Soldier
Tom Clancy’s Splinter Cell: Conviction
Your Shape: Fitness Evolved
Ubisoft appears to have responded to claims made on RPS that the Uplay plugin has security issues, and has updated it to version 2.04, nerfing it so that it can only launch the Uplay app.
If you're still not convinced that your PC is safe, try removing the plugin via the methods below:
Tools > Add-ons > Plugins > Disable Uplay/Uplay PC Hub plugins
Type "about:plugins" into the search bar and disable
Settings > Preferences > Advanced > Downloads > Search "Uplay" and delete