Activision : Security Vulnerabilities, CVEs,
An issue was discovered in Activision Infinity Ward Call of Duty Modern Warfare 2 through 2019-12-11. PartyHost_HandleJoinPartyRequest has a buffer overflow vulnerability and can be exploited by using a crafted joinParty packet. This can be utilized to conduct arbitrary code execution on a victim's machine.
Max CVSS
10.0
EPSS Score
0.54%
Published
2020-06-30
Updated
2020-07-09
SV_SteamAuthClient in various Activision Infinity Ward Call of Duty games before 2015-08-11 is missing a size check when reading authBlob data into a buffer, which allows one to execute code on the remote target machine when sending a steam authentication request. This affects Call of Duty: Modern Warfare 2, Call of Duty: Modern Warfare 3, Call of Duty: Ghosts, Call of Duty: Advanced Warfare, Call of Duty: Black Ops 1, and Call of Duty: Black Ops 2.
Max CVSS
9.8
EPSS Score
0.99%
Published
2019-04-19
Updated
2019-04-22
Stack-based buffer overflow in Activision Infinity Ward Call of Duty Modern Warfare 2 before 2018-04-26 allows remote attackers to execute arbitrary code via crafted packets.
Max CVSS
10.0
EPSS Score
9.99%
Published
2018-05-03
Updated
2020-08-24
Call of Duty Elite for iOS 2.0.1 does not properly validate the server SSL certificate, which allows remote attackers to obtain sensitive information via a Man-in-the-Middle (MITM) attack.
Max CVSS
5.8
EPSS Score
0.21%
Published
2013-01-22
Updated
2017-08-29
Call of Duty 4 (CoD4) 1.5 and earlier allows remote authenticated users to cause a denial of service (crash) via a type 7 stats packet, which triggers a memcpy with a negative value.
Max CVSS
6.8
EPSS Score
16.99%
Published
2008-05-07
Updated
2018-10-11
Buffer overflow in (1) Call of Duty 1.5b and earlier, (2) Call of Duty United Offensive 1.51b and earlier, and (3) Call of Duty 2 1.3 and earlier allows remote attackers to execute arbitrary code via a long map argument to the "callvote map" command.
Max CVSS
7.5
EPSS Score
3.69%
Published
2006-09-28
Updated
2017-07-20
Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.
Max CVSS
5.0
EPSS Score
1.66%
Published
2005-05-02
Updated
2016-10-18
Call of Duty 1.4 and earlier allows remote attackers to cause a denial of service (game end) via a large (1) query or (2) reply packet, which is not properly handled by the buffer overflow protection mechanism. NOTE: this issue might overlap CVE-2005-0430.
Max CVSS
5.0
EPSS Score
4.33%
Published
2004-09-05
Updated
2017-07-11
8 vulnerabilities found