PT-2009-4950 · Bohemia Interactive · Armed Assault

Luigi Auriemma · Publicado 2009-07-20 · Atualizado 2009-07-21 · CVE-2009-2548

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Armed Assault versions 1.14 and earlier Armed Assault version 1.16 beta Armed Assault II versions 1.02 and earlier

Description The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the nickname and datafile fields in a join request. This occurs because the fields are not properly handled when logging an error message.

Recommendations For Armed Assault versions 1.14 and earlier, consider restricting access to the join request functionality until a fix is available. For Armed Assault version 1.16 beta, avoid using the nickname and datafile fields in join requests until the issue is resolved. For Armed Assault II versions 1.02 and earlier, restrict the use of the vulnerable fields to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2009-2548

Produtos afetados

Armed Assault

Referências · 3

• 🔥 http://aluigi.altervista.org/adv/armazzofs-adv.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-2548 · Nota de Segurança
• http://vupen.com/english/advisories/2009/1951 · Aviso do Fabricante