[Uplay PC] Patch 2.0.4 - Security fix | Forums

[Vlavv]

This is it, I'm officially done with Ubi Soft. UPlay has always been nothing but a burden. And now this? This is ridiculous. You need to deeply rework your strategy.

[mdmochowski]

There is no info nor question while installing Uplay about adding any "plugin" nor messing with any other software.
Every other installer all over the world ASKS if we want to install a plugin to something or not. If it doesn't ask, it's probably a malicious software. Just like in this case. If it wasn't deliberate, then uplay installer wouldn't hide the fact it's installing some "plugin".

I've disabled your plugins in my browsers. If you want to make your own browser with a "plugin", please make it. But I want my browser clean and without any 3rd party "additions".
Hopefully Mozilla will blacklist this plugin because installing it is not an option but is installed secretly so users don't even know it's there, lurking. For all I know, it might be sniffing my credit card data. Yea, you'll say it doesn't do that, sorry but I was already bitten by a snake and I'm not happy when I see any common lizzard now.

In the meantime, I just want to share with other customers the fact that HoMM6 works flawlessly with only Uplay running while those plugins, plugins that only Ubisoft knows why they exist in the first place, are disabled.

I second that.

If not for Thunderbird reporting that the add-on is known to cause stability or security problems, I never would have known Uplay installed some crap for Chrome and my mail client.

Seriously, how dare you provide hidden plug-ins for browsers and mail clients? I thought only spyware installed shady stuff. Now how do I know you didn't extract information from my mailbox/address book/whatever? Preposterous.

[RosMan80]

I belive it is about time, as customers around the world, to use our brain and start thinking. It is because we buy their games, they get the income to treat us this way. I repeat again, because we BUY their games, they treat us in this way. It is absurd, that they use these methods, and burden PAYING customers in such manner. I mean, it is not a myth that Pirates get around this so called "protection"..

It is about time, we stop buying these games, and make this company to re think their way of business, or simply make this company go bankrupt.

I beg all of you, to think carefully before you buy another Ubisoft game.

It is simple as that.

We want working games. We pay for entertainment. Are we entertained ?

[XI_Strid_IX]

Want to see what it's like trying to get both browser plug-ins removed via customer support? It's like carrying on a conversation with a child.

**The bottom message is the first, the top is the most recent**

Subject [Uplay PC] Web Plug-in Exploit Discussion Thread Response Via Email (Trent)07/31/2012 05:59 PM
Hi,

They are not hidden. Just load up Firefox -> Add ons -> Plugins -> Find the two plugins in question -> disable.

They are of absolutely NO RISK, especially so if they are not active (disabled) in a web browser.

Customer By Web Form 07/31/2012 05:46 PM

If Uplay PC 1.0.0.1 and Uplay PC Hub Plugin 1.0.0.1 showed up under Windows Control Panel > Programs and Features uninstall menu (Windows 7 Ultimate x64), I would have never created this support ticket. Any other ideas where your software guys may have hidden these two files to keep me from being able to remove them?

Response Via Email (Trent)07/31/2012 05:15 PM
Hi,

There is no longer a vulnerability in the web plug-in. There is no need to uninstall anything. However, if you wish to do so, you can uninstall them independantly, or uninstall Uplay completely from the Windows Control Panel -> Programs and Features menu, the same way you would uninstall any program.

There are two browser plugins used by Uplay PC:

Uplay PC 1.0.0.1 - Disabling this plug-in will prevent Uplay.com from detecting a local installation of the Uplay PC application. It is not recommended that you disable this plugin if you continue to use Uplay.

Uplay PC Hub Plugin 1.0.0.1 - The Uplay PC Hub Plug-in is used solely by the Uplay PC application. Because the Uplay PC application is built on technology that is like an Internet browser, some of the technology it uses is the same kind as that of an Internet browser.Firefox appears to search for all Internet plug-ins, irrespective of whether they interact with Firefox itself or not. Disabling this plug-in in Firefox will have no effect on your ability to play your games.

Customer By Web Form 07/31/2012 05:10 PM

My question was not answered. I know the issue was patched, I stated that. I want them removed regardless, I do not trust them and they are 100% useless. If uninstalling Uplay is the only way, I'm fine with that, just say so and that's what I'll do. There are other, better ways to play your games at this point without dealing with Uplay in the first place.

Response Via Email (Trent)07/31/2012 11:21 AM
Hi,

Yesterday, we released a patch for Uplay PC, which will update your client to version 2.0.4. This patch corrects a flaw in the browser plug-in that was brought to our attention earlier today. We recommend that you update your Uplay PC application without a web browser open, as this will allow the plug-in to update correctly. An updated version of the Uplay PC installer with the patch is also available from http://www.uplay.com. Once patched, there is no longer a security risk.

Ubisoft takes security issues very seriously, and we will continue to monitor all reports of vulnerabilities within our software and take swift action to resolve such issues.

Customer By Web Form 07/30/2012 07:29 PM

Hello, I'm aware Ubisoft has patched the recent security threat brought about to my computer from the installation of browser add-ons that were not secure. However, I want these browser add-ons completely removed from my PC, unsurprisingly, the option in my Firefox > tools > add-ons > plug-ins does not allow for me to uninstall them, as it does for every other add-on I have. If there are a specific files in the Ubisoft Game Launcher folder that I can delete to remove these though, which there very much should be, I'd appreciate knowing which they are. If I must uninstall Uplay to get rid of them, so be it, I'll either not play my games or use their cracked files and going forward I'll just cease any spending of my money on products linked to Uplay.

You guys really should consider stopping the use of treating us paying customers like the bad guys here.

[McSquishin]

So I see a lot of ranting and raving, but not much complaining about anyone being unable to successfully patch uplay to 2.0.4, and unfortunately that's my problem. I've followed the instructions, and uplay consistently shows itself to only be patched to 2.0.3 every time I check the release notes. I've even uninstalled and re installed the ubisoft game launcher and that hasn't fixed it. I can't find a link anywhere that leads specifically to a download page for the patch. So considering that uplay doesn't seem to be updating itself, I see no option to manually update, uninstalling and re installing doesn't work, what are my options?

[out-side]

Ubisoft takes security issues very seriously,

That is a pure blatant lie, because if Ubisoft did take their customers security even a little bit seriously and not very seriously, they would have contacted them as soon as this issue raised it's ugly head but as of now I have still not heard from Ubisoft about this matter, neither do I know anyone who has. You are nothing but a disgrace in the world of computer games Ubisoft and you should all be ashamed of yourselves.

[Anykeyer]

I dont see thy this is such a big problem. New Uplay application is essentially a browser without an address bar. It uses Chromium engine and because if this shares common mozilla plugins with Fixefox, Chrome and others. Hub plugin is usefull only to Uplay app itself. And from my undestanding it is very important making almost all UI stuff and communicationg UI to app itself. Its somewhat bloated design however. But getting rid of it will requre releasing Uplay 3.0 or at least 2.5. Maybe they can change it so it will not show up in other browsers or at least auto-disable itself.
Partly browser developers are to blame here too, because they silently enable any plugins that just got registered in a system. Even IE 9 security model does not do this. If you installed ActiveX (IE format plugin) using not browser itself (not by clicking on a webpage and confirming that you want to install required plugin but by getting it with app install like Adobe Acrobat) then browser will first ask you if you want to enable that plugin on next restart.

[Deadly-Bagel]

Ubisoft takes security issues very seriously, and we will continue to monitor all reports of vulnerabilities within our software and take swift action to resolve such issues.

Well I must say Ubisoft have actually managed an AVERAGE response time for this issue, though such a blatent disregard for security and disclosure loses them far more points than were gained.

Now if only they took customer feedback this seriously. I suppose they can get sued over a security hole in software they installed without anyone's knowledge or consent. They can't get sued for just being jerks.

[Zullivan1987]

There are always problems when the application closed Uplay, I have multiple PCs, the most curious of this eeror, is that always the same closed after the game gives me this error, I hope you can fix it soon.

Deatils error

Firma con problemas:
Nombre del evento de problema: APPCRASH
Nombre de la aplicación: ACRSP.exe
Versión de la aplicación: 0.0.0.0
Marca de tiempo de la aplicación: 4f3a78e5
Nombre del módulo con errores: overlay.dll
Versión del módulo con errores: 0.0.0.0
Marca de tiempo del módulo con errores: 5016762a
Código de excepción: c0000005
Desplazamiento de excepción: 00061692
Versión del sistema operativo: 6.1.7600.2.0.0.768.3
Id. de configuración regional: 18442
Información adicional 1: 0a9e
Información adicional 2: 0a9e372d3b4ad19135b953a78882e789
Información adicional 3: 0a9e
Información adicional 4: 0a9e372d3b4ad19135b953a78882e789

[gurpret0706023]

hi ,lets we play assassin creed botherhood