CVE-2009-2547

CVE-2009-2547 describes an integer underflow in ArmA (Armed Assault) up to version 1.14 and earlier, and ArmA 1.16 beta, and ArmA II up to version 1.02 and earlier. A remote attacker can send a VoIP over Network (VON) packet to port 2305 with a negative packet_size value, triggering a buffer over...

CVE-2009-2548

This CVE (CVE-2009-2548) affects Armed Assault (ArmA) 1.14 and earlier, 1.16 beta, and Armed Assault II 1.02 and earlier. The issue is a format-string vulnerability in join-request handling where format specifiers in the nickname and datafile fields are improperly processed during error logging, ...

CVE-2009-2549

CVE-2009-2549 affects Armed Assault (ArmA) 1.14 and earlier, ArmA 1.16 beta, and Armed Assault II 1.02 and earlier. A remote attacker can cause denial of service by sending a join packet whose final field is 0 (server crash due to memory allocation) or 1 (CPU/memory consumption and NULL pointer d...