Vulnerabilities > Activision > Call OF Duty > High

DATE CVE VULNERABILITY TITLE RISK
2019-04-19 CVE-2018-20817 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Activision products
SV_SteamAuthClient in various Activision Infinity Ward Call of Duty games before 2015-08-11 is missing a size check when reading authBlob data into a buffer, which allows one to execute code on the remote target machine when sending a steam authentication request.
network
low complexity
activision CWE-119
7.5
2006-09-28 CVE-2006-5058 Remote Buffer Overflow vulnerability in Activision products
Buffer overflow in (1) Call of Duty 1.5b and earlier, (2) Call of Duty United Offensive 1.51b and earlier, and (3) Call of Duty 2 1.3 and earlier allows remote attackers to execute arbitrary code via a long map argument to the "callvote map" command.
network
low complexity
activision
7.5