Activision
8 CVEs across 14 Activision products. Browse Activision vulnerabilities, severities, and proof-of-concept exploits.
Activision products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-20893 | Critical | 9.8 | 2020-06-30 | An issue was discovered in Activision Infinity Ward Call of Duty Modern Warfare 2 through 2019-12-11. PartyHost_HandleJoinPartyRequest has a buffer overflow vu… |
CVE-2018-20817 | Critical | 9.8 | 2019-04-19 | SV_SteamAuthClient in various Activision Infinity Ward Call of Duty games before 2015-08-11 is missing a size check when reading authBlob data into a buffer, w… |
CVE-2018-10718 | Critical | 10.0 | 2018-05-03 | Stack-based buffer overflow in Activision Infinity Ward Call of Duty Modern Warfare 2 before 2018-04-26 allows remote attackers to execute arbitrary code via c… |
CVE-2012-4918 | | 2013-01-22 | Call of Duty Elite for iOS 2.0.1 does not properly validate the server SSL certificate, which allows remote attackers to obtain sensitive information via a Man… | |
CVE-2008-2106 | | 2008-05-07 | Call of Duty 4 (CoD4) 1.5 and earlier allows remote authenticated users to cause a denial of service (crash) via a type 7 stats packet, which triggers a memcpy… | |
CVE-2006-5058 | | 2006-09-28 | Buffer overflow in (1) Call of Duty 1.5b and earlier, (2) Call of Duty United Offensive 1.51b and earlier, and (3) Call of Duty 2 1.3 and earlier allows remote… | |
CVE-2005-0983 | | 2005-05-02 | Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly t… | |
CVE-2004-1664 | | 2004-09-05 | Call of Duty 1.4 and earlier allows remote attackers to cause a denial of service (game end) via a large (1) query or (2) reply packet, which is not properly h… |