Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) and previous versions, and Battlefield 2142 (1.10.48.0) and previous versions, allow remote servers to overwrite arbitrary files on the client via "..\" (dot dot backslash) sequences in URLs for the (1) sponsor or (2) community logos, and other URLs related to (3) DemoDownloadURL, (4) DemoIndexURL and (5) CustomMapsURL.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
ea battlefield 2142 |
||
ea battlefield 2 |