call of duty hacking situation is insane

Quick Overview

Call of Duty: World War II players on PC via Game Pass are currently vulnerable to Remote Code Execution (RCE) exploits, allowing attackers to run arbitrary code on their computers, due to a long-standing buffer overflow vulnerability in the game's peer-to-peer networking architecture that anti-cheat systems cannot detect.

Key Points: Call of Duty: World War II players on PC (Game Pass version) are experiencing Remote Code Execution (RCE) hacks, allowing attackers to run code on their machines. This vulnerability is likely a re-emergence of a known buffer overflow exploit from older Call of Duty titles, specifically Modern Warfare 2 (2017). The exploit targets the host's system in peer-to-peer matches, leveraging a stack-allocated buffer overflow within the game's network handling. Maurice Heumann discovered and documented a similar RCE vulnerability in Call of Duty in 2017, which allowed remote code execution by injecting malicious packets. Anti-cheat systems are ineffective against this RCE exploit because they primarily detect injected programs or modified game states, not vulnerabilities within the game's core networking code itself. The Game Pass PC version of Call of Duty: WWII is particularly susceptible as it uses a peer-to-peer hosting model, unlike Steam versions which might have dedicated servers. Players are advised to avoid playing Call of Duty: WWII on PC via Game Pass until the issue is officially patched by Activision.

Context: The video discusses a critical security vulnerability affecting Call of Duty: World War II players on PC, specifically those playing through Game Pass. This issue allows malicious actors to gain remote control over other players' computers. The presenter, Ed, explains the technical details of how such exploits work, drawing parallels to a similar vulnerability discovered in older Call of Duty titles in 2017.

Detailed Analysis

The video details a severe Remote Code Execution (RCE) vulnerability impacting Call of Duty: World War II players on PC, particularly those accessing the game via Game Pass. This exploit allows attackers to execute arbitrary code on a victim's computer during gameplay. The presenter explains that this is likely a re-emergence of a buffer overflow vulnerability first documented in 2017 by Maurice Heumann, affecting older Call of Duty titles like Modern Warfare 2. This vulnerability arises because the game's networking code, especially in peer-to-peer hosted matches, allows a player to cause a buffer overflow on the host's system by sending specially crafted malicious packets. This grants the attacker full remote code execution capabilities. Unlike typical cheats that modify game states or inject external programs, this RCE exploit manipulates the game's inherent network handling, making it undetectable by conventional anti-cheat systems. The Game Pass version of WWII is highlighted as vulnerable because it relies on a peer-to-peer hosting model, where one player acts as the server, exposing their system to such attacks. The presenter advises players to avoid the game until Activision addresses this critical security flaw.