CVE-2010-2627

Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) and earlier, and Battlefield 2142 (1.10.48.0) and earlier, allow remote servers to overwrite arbitrary files on the client via "..\" (dot dot backslash) sequences in URLs for the (1) sponsor or (2) community logos, and other URLs related to (3) DemoDownloadURL, (4) DemoIndexURL and (5) CustomMapsURL.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

3.66% chance of exploitation in the next 30 days, 89th percentile

Published

2010-07-02

Updated

2024-09-16

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/14267

References

• CVE Record
• NVD entry

Related

• CVE-2010-2626
• CVE-2010-2630
• CVE-2010-2624
• CVE-2010-2631
• CVE-2010-2623
• CVE-2010-2632