CVE-2010-2627 EXPLOIT
6.8
MEDIUM · CVSS 2.0 · EPSS 3.7% (pctl 89)
Patch early
A public exploit exists.
Description
Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) and earlier, and Battlefield 2142 (1.10.48.0) and earlier, allow remote servers to overwrite arbitrary files on the client via "..\" (dot dot backslash) sequences in URLs for the (1) sponsor or (2) community logos, and other URLs related to (3) DemoDownloadURL, (4) DemoIndexURL and (5) CustomMapsURL.
Scoring
| CVSS | 6.8 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| EPSS | 3.66% — more likely to be exploited than 89% of all CVEs |
| Weakness | CWE-22 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2010-07-02 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| ea | battlefield 2 |
| ea | battlefield 2142 |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | EA Battlefield 2 / Battlefield 2142 - Multiple Arbitrary File Upload Vulnerabilities | 2010-07-08 |
References
→ the Explorer · watch your stack · NVD