RCE in Openttd

CVE-2010-0402

OpenTTD before 1.0.1 does not properly validate index values of certain items, which allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted in-game command.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.022 (80.8th percentile) — read the EPSS interpretation.

Affected products

  • Openttd — versions 0.7.4, 0.5.0, 0.3.2
  • N/a — versions n/a

Weakness classification (CWE)

References