Remote Code Execution Vulnerability in Epic Games Launcher by Epic Games

CVE-2018-17707

What is CVE-2018-17707?

This vulnerability enables remote attackers to execute arbitrary code on systems running vulnerable versions of the Epic Games Launcher, specifically those prior to 8.2.2. The exploit requires user interaction, whereby the target must access a malicious website or open a crafted file. The flaw is associated with the processing of the 'com.epicgames.launcher' protocol, which can trigger the execution of a system call through a string provided by the attacker. This poses a significant risk as it allows unauthorized code execution under the users' context, potentially leading to further system compromises.

References