← back
CVE-2010-2627

CVE-2010-2627

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 3.7%
from disclosure to weapon6 days
Published on NVDJul 2
1st PoC+6d
exploitation probability
3.7%top 11% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) and earlier, and Battlefield 2142 (1.10.48.0) and earlier, allow remote servers to overwrite arbitrary files on the client via "..\" (dot dot backslash) sequences in URLs for the (1) sponsor or (2) community logos, and other URLs related to (3) DemoDownloadURL, (4) DemoIndexURL and (5) CustomMapsURL.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.