PT-2009-4949 · Bohemia Interactive · Armed Assault

Luigi Auriemma · Published 2009-07-20 · Updated 2017-08-17 · CVE-2009-2547

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Armed Assault versions 1.14 and earlier Armed Assault version 1.16 beta Armed Assault II versions 1.02 and earlier

Description The issue is caused by an integer underflow that allows remote attackers to cause a denial of service, resulting in a crash. This is achieved by sending a VoIP over Network (VON) packet to port 2305 with a negative packet size value, which triggers a buffer over-read.

Recommendations For Armed Assault versions 1.14 and earlier, update to a version later than 1.14 to resolve the issue. For Armed Assault version 1.16 beta, avoid using the beta version until a stable release is available that addresses the issue. For Armed Assault II versions 1.02 and earlier, update to a version later than 1.02 to resolve the issue. As a temporary workaround, consider restricting access to port 2305 to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2009-2547

Affected Products

Armed Assault

References · 5

• 🔥 http://aluigi.altervista.org/adv/armadioz-adv.txt · Exploit
• http://vupen.com/english/advisories/2009/1951 · Vendor Advisory
• http://secunia.com/advisories/35900 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2547 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51820 · Note