« Volver al listado

CVE-2009-2548

Estado: ModificadaAlta (10)—

Format string vulnerability in Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the (1) nickname and (2) datafile fields in a join request, which is not properly handled when logging an error message.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Bistudio — ArmaBistudio — Arma 2

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-2548",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-07-20T20:00:13.843",
  "references": [
    {
      "url": "http://aluigi.altervista.org/adv/armazzofs-adv.txt",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/1951",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://aluigi.altervista.org/adv/armazzofs-adv.txt",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/1951",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-134"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Format string vulnerability in Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the (1) nickname and (2) datafile fields in a join request, which is not properly handled when logging an error message."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de cadena de formato en Armed Assault (también conocido como ArmA) v1.14 y anteriores, y v1.16 beta, y Armed Assault II v1.02 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída) y probablemente ejecutar código de su elección mediante especificaciones de cadenas de formato en los campos (1) \"nickname\" y (2) \"datafile\" en una petición de conexión, no manejando correctamente el registro del mensaje de error."
    }
  ],
  "lastModified": "2026-06-16T23:09:41.160",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:bistudio:arma:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2BBC0E6F-B56B-4BE1-BCC3-61BE2391FBDF",
              "versionEndIncluding": "1.16_beta"
            },
            {
              "criteria": "cpe:2.3:a:bistudio:arma:1.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D3941008-81E2-45FA-8588-8D88CD295CE2"
            },
            {
              "criteria": "cpe:2.3:a:bistudio:arma_2:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD0DDA32-B5C8-4F9F-AE22-CFF500670D84",
              "versionEndIncluding": "1.02"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}