CVE-2010-2627: Path Traversal
Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) and earlier, and Battlefield 2142 (1.10.48.0) and earlier, allow remote servers to overwrite arbitrary files on the client via "..\" (dot dot backslash) sequences in URLs for the (1) sponsor or (2) community logos, and other URLs related to (3) DemoDownloadURL, (4) DemoIndexURL and (5) CustomMapsURL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2627?
CVE-2010-2627 is classified as a medium-severity vulnerability due to the potential for remote file overwriting.
How do I fix CVE-2010-2627?
To mitigate CVE-2010-2627, users should update to the latest version of Battlefield 2 and Battlefield 2142 that addresses this vulnerability.
What systems are affected by CVE-2010-2627?
CVE-2010-2627 affects Battlefield 2 version up to 1.50 and Battlefield 2142 version up to 1.10.48.0.
What type of vulnerability is CVE-2010-2627?
CVE-2010-2627 is a directory traversal vulnerability allowing attackers to access and overwrite arbitrary files on the client.
Can CVE-2010-2627 be exploited remotely?
Yes, CVE-2010-2627 can be exploited remotely by sending specially crafted URLs that utilize directory traversal sequences.