4 matches found
CVE-2013-6411
The HandleCrashedAircraft function in aircraftcmd.cpp in OpenTTD 0.3.6 through 1.3.2 allows remote attackers to cause a denial of service out-of-bounds read and crash by crashing an aircraft outside of the map...
MGASA-2013-0363 Updated openttd package fixes security vulnerability
A missing validation in OpenTTD before 1.3.3 allows remote attackers to cause a denial of service crash by forcefully crashing aircraft near the corner of the map. This triggers a corner case where data outside of the allocated map array is accessed CVE-2013-6411...
CVE-2010-0402
OpenTTD before 1.0.1 does not properly validate index values of certain items, which allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted in-game command...
CVE-2008-3576
Buffer overflow in the TruncateString function in src/gfx.cpp in OpenTTD before 0.6.2 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted string. NOTE: some of these details are obtained from third party information...