PT-2009-4949 · Bohemia Interactive · Armed Assault

Luigi Auriemma · Publicado 2009-07-20 · Atualizado 2017-08-17 · CVE-2009-2547

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Armed Assault versions 1.14 and earlier Armed Assault version 1.16 beta Armed Assault II versions 1.02 and earlier

Description The issue is caused by an integer underflow that allows remote attackers to cause a denial of service, resulting in a crash. This is achieved by sending a VoIP over Network (VON) packet to port 2305 with a negative packet size value, which triggers a buffer over-read.

Recommendations For Armed Assault versions 1.14 and earlier, update to a version later than 1.14 to resolve the issue. For Armed Assault version 1.16 beta, avoid using the beta version until a stable release is available that addresses the issue. For Armed Assault II versions 1.02 and earlier, update to a version later than 1.02 to resolve the issue. As a temporary workaround, consider restricting access to port 2305 to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2009-2547

Produtos afetados

Armed Assault

Referências · 5

• 🔥 http://aluigi.altervista.org/adv/armadioz-adv.txt · Exploit
• http://vupen.com/english/advisories/2009/1951 · Aviso do Fabricante
• http://secunia.com/advisories/35900 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-2547 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51820 · Nota