CVE-2009-2549

Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service via a join packet with a final field whose value is (1) 0, which triggers a server crash related to memory allocation, or (2) 1, which triggers CPU/memory consumption and a NULL pointer dereference.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://aluigi.altervista.org/adv/armazzo-adv.txt	Exploit
http://www.vupen.com/english/advisories/2009/1951	Vendor Advisory
http://aluigi.altervista.org/adv/armazzo-adv.txt	Exploit
http://www.vupen.com/english/advisories/2009/1951	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:bistudio:arma::::::::
	cpe:2.3:a:bistudio:arma:1.14:::::::*
	cpe:2.3:a:bistudio:arma_2::::::::

History

21 Nov 2024, 01:05

Type	Values Removed	Values Added
References	~~() http://aluigi.altervista.org/adv/armazzo-adv.txt - Exploit~~	() http://aluigi.altervista.org/adv/armazzo-adv.txt - Exploit
References	~~() http://www.vupen.com/english/advisories/2009/1951 - Vendor Advisory~~	() http://www.vupen.com/english/advisories/2009/1951 - Vendor Advisory

Information

Published : 2009-07-20 20:00

Updated : 2024-11-21 01:05

NVD link : CVE-2009-2549

Mitre link : CVE-2009-2549

CVE.ORG link : CVE-2009-2549

JSON object : View

Products Affected

bistudio

arma_2
arma

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2009-2549", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-07-20T20:00:13.877", "references": [{"url": "http://aluigi.altervista.org/adv/armazzo-adv.txt", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2009/1951", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://aluigi.altervista.org/adv/armazzo-adv.txt", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2009/1951", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service via a join packet with a final field whose value is (1) 0, which triggers a server crash related to memory allocation, or (2) 1, which triggers CPU/memory consumption and a NULL pointer dereference."}, {"lang": "es", "value": "Armed Assault (tambi\u00e9n conocido como ArmA) v1.14 y anteriores, y v1.16 beta, y Armed Assault II v1.02 y anteriores permite a atacantes remotos provocar una denegaci\u00f3n de servicio mediante un paquete de conexi\u00f3n con un campo final cuyo valor sea (1) 0, provocando una ca\u00edda del servidor relacionada con la asignaci\u00f3n de memoria, o (2) 1, provocando un consumo de CPU/memoria y una referencia a puntero NULL."}], "lastModified": "2024-11-21T01:05:08.420", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:bistudio:arma:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2BBC0E6F-B56B-4BE1-BCC3-61BE2391FBDF", "versionEndIncluding": "1.16_beta"}, {"criteria": "cpe:2.3:a:bistudio:arma:1.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3941008-81E2-45FA-8588-8D88CD295CE2"}, {"criteria": "cpe:2.3:a:bistudio:arma_2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD0DDA32-B5C8-4F9F-AE22-CFF500670D84", "versionEndIncluding": "1.02"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}