RCE Exploits are still alive *PLAY AT YOUR OWN RISK!*

[optimism]

Infinity Ward's summer 2023 update for MW2 fixed CVE-2019-20893 which is the infamous JoinParty RCE exploit and added a new file called "CodCleaner.exe" into the game's files which checks if dsound.dll (an unused dll in Modern Warfare 2 that is present in nearly all DirectX games that has been repurposed) is being used to spread malware. This was good enough to ward off cheaters and exploiters for a week at most (I'm being too kind -- maybe a day or two at most) but they've since come back with fixes to be able to play online with their menu.

Keep in mind that JoinParty RCE is one out of many exploits that were found on MW2 and COD games released before 2016~2017. CVE-2018-20817 (SV_SteamAuthClient exploit) and CVE-2018-10718 RCE have not been patched, so Infinity Ward's effort to keep their game free from exploits was half-assed.

Cheaters can download a version of the iw4mp executable from before the August 2023 patch that allows them to use their RCE mod menu and has online/Steam functionality enabled, rendering the latest update useless.

What can the cheaters do with their mod menu? Looking at the source code of the software they're using (which is also EASILY findable online), they can (from mild to worse to extreme):

- Send player to Campaign mode
- Reset stats/unlock all
- Induce a host migration,
- Disable other players' Steam overlay,
- Force friend requests
- Crash & freeze players,
- Close game
- Kick player
- Get player IP address
- Spoof their Steam ID to impersonate other players
(any reports directed at them will go straight to the impersonated players)
- Add players to their '♥♥♥♥ list' which renders those players unable to play MW2 on their account ever again, unless they get removed from it,
- Force mic on/off,
- Open websites*,
- Download files*,
- Run executables*,
- Load .dll files*,
- Set desktop wallpaper*,
- Play sounds*,
- Trigger BSOD*,
- Shutdown PC*,
- Delete files* (can essentially brick your PC if they know what they're doing)
- Open processes* (e.g. open up Chrome, Discord, whatever)
- Kill processes*

*on other players' behalf.

MalwareBytes isn't enough to protect you from this and every time you open up the game and play online you're opening up your PC to be exploited. Your entire machine can be controlled.

Play at your own risk. As time goes on, more and more people become aware of the RCE software & use it online. The guy who programmed it leaked the source code a year ago, anyone can figure out how to use it now.

Activision and Infinity Ward won't bother fixing this, it's a 15-year old largely irrelevant game they only acknowledge when they copy & paste its maps to their latest reboot (more than half of MWIII (2023)'s maps are from MW2 2009). Maybe if Steam removes vulnerable COD games from the storefront until the exploits are patched they'll fix it, but until that happens the safest thing to do is go on IW four X or play on X360 if possible instead.

[Axel The Vampire Slayer]

This sucks, ♥♥♥♥ those cheaters big time and ♥♥♥♥ Activision and IW for not bothering to patch the security on these games. They have the balls to sell these games at full price despite these glaring issues, it's ♥♥♥♥♥♥♥♥ honestly. Did I mention ♥♥♥♥ those cheaters and hackers abusing these things too? Well ♥♥♥♥ them.

[Rito Head Honcho]

I'm currently working with the BBB to file a class action lawsuit against Microsoft and Activision. You'll likely hear about it in 2026/2027.

[infrared]

SteamAuthClient and the other one were patched in 2018 on all CODs dude...

[TRethehedgehog]

SteamAuthclient was psyched in 2018

Idk what dumbass decided to use that as a copy pasta, but you guys need to find a new RCE, preferably unpatched, to reference

[TRethehedgehog]

Originally posted by FaZe Rito:

I'm currently working with the BBB to file a class action lawsuit against Microsoft and Activision. You'll likely hear about it in 2026/2027.

That’s not going anywhere

You’re wasting your time and money

Also it just became Microsoft’s problem they could be fixing it, mergers take awhile

COD community is so dumb, they buy the same game every year and then think every problem will magically be fixed on the day of some buyout

[76561199690577654]

Originally posted by FaZe Rito:

I'm currently working with the BBB to file a class action lawsuit against Microsoft and Activision. You'll likely hear about it in 2026/2027.

HAHAHAHAHAHAHAH MR DELULU

[Rito Head Honcho]

Originally posted by TRethehedgehog:

Originally posted by FaZe Rito:

I'm currently working with the BBB to file a class action lawsuit against Microsoft and Activision. You'll likely hear about it in 2026/2027.

That’s not going anywhere

You’re wasting your time and money

Also it just became Microsoft’s problem they could be fixing it, mergers take awhile

COD community is so dumb, they buy the same game every year and then think every problem will magically be fixed on the day of some buyout

I'm an attorney, it will go somewhere, trust me.

[rad]

just use the alterware client

[【๖ۣۜ.#נυѕтƒαмє™】]

Originally posted by 76561199690577654:

Originally posted by FaZe Rito:

I'm currently working with the BBB to file a class action lawsuit against Microsoft and Activision. You'll likely hear about it in 2026/2027.

HAHAHAHAHAHAHAH MR DELULU

na cmon bro, this game is old af and youre still cheating in there? how sad. you wouldnt survive a single day in counter strike without your cheats, i bet you got like no aim and zero gamesense.

[rad]

Originally posted by 【๖ۣۜ.#נυѕтƒαмє™】:

Originally posted by 76561199690577654:

HAHAHAHAHAHAHAH MR DELULU

na cmon bro, this game is old af and youre still cheating in there? how sad. you wouldnt survive a single day in counter strike without your cheats, i bet you got like no aim and zero gamesense.

this isnt counter strike

[76561199690577654]

Originally posted by FaZe Rito:

Originally posted by TRethehedgehog:

That’s not going anywhere

You’re wasting your time and money

Also it just became Microsoft’s problem they could be fixing it, mergers take awhile

COD community is so dumb, they buy the same game every year and then think every problem will magically be fixed on the day of some buyout

I'm an attorney, it will go somewhere, trust me.

HAHAHAHAAHAHAHHAHAHA

[rad]

Originally posted by infrared:

SteamAuthClient and the other one were patched in 2018 on all CODs dude...

games still filled with exploits. better off on alterware where exploits arent being discovered every 2 weeks

[tyl0413]

Play on linux and you've automatically protected yourself from anything serious.

[rad]

Originally posted by tyl0413:

Play on linux and you've automatically protected yourself from anything serious.

the con to this is that you have to use linux

[Stinger757575]

Originally posted by Raddooggie:

just use the alterware client

that has even more hackers