PT-2025-9186 · Blizzard · Blizzard Battle.Net

Fergod

+1

·

Published

2025-03-01

·

Updated

2025-07-29

·

CVE-2025-1804

CVSS v2.0

6.0

Medium

VectorAV:L/AC:H/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Blizzard Battle.Net versions up to 2.39.0.15212
Description A critical issue was found in Blizzard Battle.Net, affecting some unknown functionality in the library profapi.dll. The manipulation leads to an uncontrolled search path. The attack needs to be approached locally and has a rather high complexity, making exploitation difficult.
Recommendations For versions up to 2.39.0.15212, as a temporary workaround, consider restricting access to the profapi.dll library until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Untrusted Search Path

Uncontrolled Search Path Element

Weakness Enumeration

CWE-426CWE-427

Related Identifiers

CVE-2025-1804

Affected Products

Blizzard Battle.Net