{
  "id": "CVE-2009-2549",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2009-07-20T20:00:13.877",
  "lastModified": "2009-07-21T04:00:00.000",
  "vulnStatus": "Analyzed",
  "descriptions": [
    {
      "lang": "en",
      "value": "Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service via a join packet with a final field whose value is (1) 0, which triggers a server crash related to memory allocation, or (2) 1, which triggers CPU/memory consumption and a NULL pointer dereference."
    },
    {
      "lang": "es",
      "value": "Armed Assault (tambi\u00e9n conocido como ArmA) v1.14 y anteriores, y v1.16 beta, y Armed Assault II v1.02 y anteriores permite a atacantes remotos provocar una denegaci\u00f3n de servicio mediante un paquete de conexi\u00f3n con un campo final cuyo valor sea (1) 0, provocando una ca\u00edda del servidor relacionada con la asignaci\u00f3n de memoria, o (2) 1, provocando un consumo de CPU/memoria y una referencia a puntero NULL."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "accessVector": "NETWORK",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0
        },
        "baseSeverity": "MEDIUM",
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:bistudio:arma:*:*:*:*:*:*:*:*",
              "versionEndIncluding": "1.16_beta",
              "matchCriteriaId": "2BBC0E6F-B56B-4BE1-BCC3-61BE2391FBDF"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:bistudio:arma:1.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "D3941008-81E2-45FA-8588-8D88CD295CE2"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:bistudio:arma_2:*:*:*:*:*:*:*:*",
              "versionEndIncluding": "1.02",
              "matchCriteriaId": "AD0DDA32-B5C8-4F9F-AE22-CFF500670D84"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://aluigi.altervista.org/adv/armazzo-adv.txt",
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ]
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/1951",
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}