
DLL Planting in the CoD MW Warzone 2 - CVE-2023-38821
DLL Planting in the CoD MW Warzone 2 - CVE-2023-38821 Discoverer: Idan Malihi
An issue in Activision Call of Duty Modern Warfare: Warzone v.2 allows a local attacker to execute arbitrary code via a crafted file to the UMPDC.dll, MSIMG32.dll, RTWorkQ.DLL, WINSTA.dll, CRYPTSP.dll, dnsapi.dll, MSASN1.dll, webio.dll, fwbase.dll, ncrypt.dll, and DPAPI.DLL components.
To exploit the DLL Planting vulnerability, an attacker should take the following steps: