CVE-2003-0650

CVE-2003-0650 describes a directory traversal vulnerability in GSAPAK.EXE, a component of GameSpy Arcade, potentially in versions prior to 1.3e. This flaw allows remote attackers to overwrite arbitrary files and execute arbitrary code by embedding ".." sequences within filenames inside a malicious .APK (Zip) file. With a CVSS score of 7.5, this vulnerability is considered high severity due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. Despite its age and severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.