CVE-2018-20817

SVSteamAuthClient in various Activision Infinity Ward Call of Duty games before 2015-08-11 is missing a size check when reading authBlob data into a buffer, which allows one to execute code on the remote target machine when sending a steam authentication request. This affects Call of Duty: Modern...

CVE-2018-20817

CVE-2018-20817 affects SV_SteamAuthClient in multiple Activision Infinity Ward Call of Duty titles (MW2, MW3, Ghosts, AW, Black Ops 1/2) released before 2015-08-11. The root cause is a missing size check when reading authBlob data into a buffer, enabling remote code execution via a crafted steam ...