Vulnerability in Openttd

CVE-2011-3341

Multiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted CMD_INSERT_ORDER command.

EPSS: 0.038 (89.0th percentile) — read the EPSS interpretation.

Affected products

  • Openttd — versions 0.1.1, 0.1.2, 0.1.3
  • N/a — versions n/a

Weakness classification (CWE)

References