PT-2009-4951 · Bohemia Interactive · Armed Assault

Luigi Auriemma · Publicado 2009-07-20 · Atualizado 2009-07-21 · CVE-2009-2549

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Armed Assault versions 1.14 and earlier Armed Assault version 1.16 beta Armed Assault II versions 1.02 and earlier

Description The issue allows remote attackers to cause a denial of service. This can be achieved via a join packet with a final field whose value is either 0, which triggers a server crash related to memory allocation, or 1, which triggers CPU/memory consumption and a NULL pointer dereference.

Recommendations For Armed Assault versions 1.14 and earlier, update to a version later than 1.14 to resolve the issue. For Armed Assault version 1.16 beta, avoid using this version until a stable release is available that addresses the issue. For Armed Assault II versions 1.02 and earlier, update to a version later than 1.02 to resolve the issue. As a temporary workaround, consider restricting access to the join packet functionality to minimize the risk of exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-2549

Produtos afetados

Armed Assault

Referências · 3

• 🔥 http://aluigi.altervista.org/adv/armazzo-adv.txt · Exploit
• http://vupen.com/english/advisories/2009/1951 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-2549 · Nota de Segurança