{"api_version":"1","generated_at":"2026-07-23T13:45:33+00:00","cve":"CVE-2010-2627","urls":{"html":"https://cve.report/CVE-2010-2627","api":"https://cve.report/api/cve/CVE-2010-2627.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-2627","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-2627"},"summary":{"title":"CVE-2010-2627","description":"Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) and earlier, and Battlefield 2142 (1.10.48.0) and earlier, allow remote servers to overwrite arbitrary files on the client via \"..\\\" (dot dot backslash) sequences in URLs for the (1) sponsor or (2) community logos, and other URLs related to (3) DemoDownloadURL, (4) DemoIndexURL and (5) CustomMapsURL.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-07-02 20:30:01","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-22","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/bid/41262","name":"http://www.securityfocus.com/bid/41262","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Malformed Request","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://osvdb.org/65863","name":"http://osvdb.org/65863","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://secunia.com/advisories/40334","name":"http://secunia.com/advisories/40334","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Battlefield 2 / 2142 Logo Download Directory Traversal Vulnerability - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://aluigi.altervista.org/adv/bf2urlz-adv.txt","name":"http://aluigi.altervista.org/adv/bf2urlz-adv.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2627","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2627","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"2627","vulnerable":"1","versionEndIncluding":"2.1.50","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ea","cpe5":"battlefield_2","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2627","vulnerable":"1","versionEndIncluding":"1.10.48.0","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ea","cpe5":"battlefield_2142","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T02:39:37.435Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"40334","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/40334"},{"name":"65863","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/65863"},{"name":"41262","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/41262"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://aluigi.altervista.org/adv/bf2urlz-adv.txt"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) and earlier, and Battlefield 2142 (1.10.48.0) and earlier, allow remote servers to overwrite arbitrary files on the client via \"..\\\" (dot dot backslash) sequences in URLs for the (1) sponsor or (2) community logos, and other URLs related to (3) DemoDownloadURL, (4) DemoIndexURL and (5) CustomMapsURL."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2010-07-02T20:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"40334","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/40334"},{"name":"65863","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/65863"},{"name":"41262","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/41262"},{"tags":["x_refsource_MISC"],"url":"http://aluigi.altervista.org/adv/bf2urlz-adv.txt"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-2627","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) and earlier, and Battlefield 2142 (1.10.48.0) and earlier, allow remote servers to overwrite arbitrary files on the client via \"..\\\" (dot dot backslash) sequences in URLs for the (1) sponsor or (2) community logos, and other URLs related to (3) DemoDownloadURL, (4) DemoIndexURL and (5) CustomMapsURL."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"40334","refsource":"SECUNIA","url":"http://secunia.com/advisories/40334"},{"name":"65863","refsource":"OSVDB","url":"http://osvdb.org/65863"},{"name":"41262","refsource":"BID","url":"http://www.securityfocus.com/bid/41262"},{"name":"http://aluigi.altervista.org/adv/bf2urlz-adv.txt","refsource":"MISC","url":"http://aluigi.altervista.org/adv/bf2urlz-adv.txt"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-2627","datePublished":"2010-07-02T20:00:00.000Z","dateReserved":"2010-07-02T00:00:00.000Z","dateUpdated":"2024-09-16T19:35:26.035Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-07-02 20:30:01","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-22","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ea:battlefield_2:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.50","matchCriteriaId":"FC0C0EB8-F09A-40F1-A28C-4F0A0C2280B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ea:battlefield_2142:*:*:*:*:*:*:*:*","versionEndIncluding":"1.10.48.0","matchCriteriaId":"B2EDD754-9895-4D94-B657-64AFA165CD6A"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"2627","Ordinal":"1","Title":"CVE-2010-2627","CVE":"CVE-2010-2627","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"2627","Ordinal":"1","NoteData":"Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) and earlier, and Battlefield 2142 (1.10.48.0) and earlier, allow remote servers to overwrite arbitrary files on the client via \"..\\\" (dot dot backslash) sequences in URLs for the (1) sponsor or (2) community logos, and other URLs related to (3) DemoDownloadURL, (4) DemoIndexURL and (5) CustomMapsURL.","Type":"Description","Title":"CVE-2010-2627"},{"CveYear":"2010","CveId":"2627","Ordinal":"2","NoteData":"2010-07-02","Type":"Other","Title":"Published"}]}}}