CVE-2010-2627: Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5....

Security readout for executives and security teams

A malicious or compromised game server could cause vulnerable Battlefield 2 or Battlefield 2142 clients to overwrite files on the player’s machine. Business exposure is likely limited to legacy installations, but impacted systems should not be treated as harmless if they are connected to broader networks. Exposure is likely limited to systems running Battlefield 2 1.50 or earlier, or Battlefield 2142 1.10.48.0 or earlier, especially when connecting to remote servers. The provided sources do not identify broader affected products beyond these games and engine usage. Prioritize cleanup where legacy game clients exist on corporate, lab, or shared systems. This is not shown as actively exploited in the supplied sources, but arbitrary file overwrite from a remote server is enough to justify removal or isolation. Mitigation focus: Inventory and remove vulnerable Battlefield 2 and Battlefield 2142 clients where not required.; Avoid connecting legacy game clients to untrusted or unknown remote servers.; Check Electronic Arts or game vendor guidance for updates or supported remediation..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.