温馨提示：本站仅提供公开网络链接索引服务，不存储、不篡改任何第三方内容，所有内容版权归原作者所有
AI智能索引来源：http://www.ea.com/security/news/july-origin-security-update
点击访问原文链接

July Origin Security Update

进入原网站 导航首页
July Origin Security Update EA Play FIFA 23 F1™ 22 Madden NFL 23 Apex Legends Battlefield™ 2042 The Sims 4 Electronic Arts Home Latest Games Coming Soon Free-To-Play EA SPORTS EA Originals Games Library EA app Deals PC PlayStation Xbox Nintendo Switch Mobile Pogo The EA app EA Play Playtesting Company Careers News Technology EA Studios EA Partners Our Commitments Positive Play People & Inclusive Culture Social Impact Environment Help EA Community Forums Player and Parental Tools Accessibility Press Investors Latest Games Coming Soon Free-To-Play EA SPORTS EA Originals Games Library EA app Deals PC PlayStation Xbox Nintendo Switch Mobile Pogo The EA app EA Play Playtesting Company Careers News Technology EA Studios EA Partners Our Commitments Positive Play People & Inclusive Culture Social Impact Environment Help EA Community Forums Player and Parental Tools Accessibility Press Investors July Origin Security Update By Adrian Stone, Sr. Director, EA Product Security

July 22, 2020

Today, we released an updated version of the Origin client to address a high severity security vulnerability. Andres Blanco and Joel Noguera of Immunity Inc confidentially worked with us through our Product Security Vulnerability Submission Program to address the issues identified in their reports.

If you have already logged into the Origin client, you likely have already been offered the update. It can also be directly downloaded here. A Security Advisory has been published with details on the vulnerability that was addressed by the update.

The issue (CVE-2020-15524) - which is now resolved - allowed a valid user with limited permissions to gain privileged-level access on computers that have Origin installed. At no time was there evidence of the vulnerability being used against our customers. If an attacker were to attempt to exploit this vulnerability, they would have needed to log in to the computer with a valid non-Administrator user account. They would then need to install a specially crafted program or execute code that modifies part of the software to obtain elevated access level.

Additionally, the team at Immunity also reported a second “Moderate” severity Information Disclosure issue (CVE-2020-13172), which does not require any action by customers and has been fixed. I also want to clarify that our policy is to release Security Advisories for Critical and High Severity vulnerabilities that require our customers to take action in order to address the issue. More information about how we classify security impact and severity can be found here.

We want to thank the security research community for the ongoing interactions, and are committed to continuing to work together to protect our players.

Related News Fighting for Fairness: Anti-Cheat Progress Report Electronic Arts Inc. Apr 24, 2025 Fighting for Fairness: Anti-Cheat Progress Report EA Security - Keeping Your EA Account Safe Electronic Arts Inc. Nov 6, 2024 EA Security - Keeping Your EA Account Safe EA anticheat is leveling the playing field Electronic Arts Inc. Aug 22, 2024 EA anticheat is keeping games fair, fun, and secure for millions of players worldwide. Careers Executives Impact Report Our Commitments Partner With Us facebook twitter youtube instagram twitch linkedin Game Library Subscribe Redeem Code EA app About Accessibility Help Forums Austria Belgium Bulgaria Croatia Cyprus Czech Republic Denmark Estonia Finland France Germany Greece Hungary Iceland Ireland Italy Latvia Liechtenstein Lithuania Luxembourg Malta Netherlands Norway Poland Portugal Romania Slovakia Slovenia Spain Sweden Switzerland United States United Kingdom Australia France Deutschland Italia 日本 Polska Brasil Россия España Česká republika Canada (En) Canada (Fr) Danmark Suomi México Nederland Norge Sverige 简体中文 대한민국 繁體中文 Türkiye Legal & Privacy User Agreement Privacy & Cookie Policy Online Service Updates Security Optional Cookies, including those that support the Multimedia Player, are currently disabled based on Your Privacy Choices settings. 

Choose Accept and Play Video to enable the Multimedia Player, including its associated Cookies. This may involve the collection and sharing of your viewing information by YouTube for analytics and advertising purposes.

You can also choose to watch the video on YouTube.

智能索引记录