Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

openttd openttd 0.4.0.1 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2013-6411
The HandleCrashedAircraft function in aircraft_cmd.cpp in OpenTTD 0.3.6 up to and including 1.3.2 allows remote malicious users to cause a denial of service (out-of-bounds read and crash) by crashing an aircraft outside of the map.
Openttd Openttd 0.6.2Openttd Openttd 0.6.0Openttd Openttd 0.5.0Openttd Openttd 0.5.1Openttd Openttd 0.7.3Openttd Openttd 0.7.4Openttd Openttd 1.0.3Openttd Openttd 1.0.0Openttd Openttd 1.2.3Openttd Openttd 1.2.2Openttd Openttd 1.1.1Openttd Openttd 1.1.0Openttd Openttd 0.3.6Openttd Openttd 0.4.5Openttd Openttd 0.4.8Openttd Openttd 0.7.1Openttd Openttd 0.7.2Openttd Openttd 1.0.4Openttd Openttd 1.0.1Openttd Openttd 1.3.2Openttd Openttd 1.3.1Openttd Openttd 1.1.3
4.3
CVSSv2
CVE-2012-0048
OpenTTD 0.3.5 up to and including 1.1.4 allows remote malicious users to cause a denial of service (game pause) by connecting to the server and not finishing the (1) authorization phase or (2) map download, aka a "slow read" attack.
Openttd Openttd 0.3.5Openttd Openttd 0.3.6Openttd Openttd 0.3.7Openttd Openttd 0.4.8Openttd Openttd 0.4.6Openttd Openttd 0.5.3Openttd Openttd 0.5.0Openttd Openttd 0.5.1Openttd Openttd 0.6.3Openttd Openttd 0.6.2Openttd Openttd 0.6.2-rc2Openttd Openttd 0.7.0Openttd Openttd 0.7.1Openttd Openttd 0.7.5Openttd Openttd 1.0.0Openttd Openttd 1.0.2Openttd Openttd 1.0.3Openttd Openttd 0.6.0Openttd Openttd 0.7.3Openttd Openttd 0.7.2Openttd Openttd 1.0.1Openttd Openttd 1.1.4
7.5
CVSSv2
CVE-2011-3342
Multiple buffer overflows in OpenTTD prior to 1.1.3 allow remote malicious users to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors related to (1) NAME, (2) PLYR, (3) CHTS, or (4) AIPL (aka AI config) chunk loading from a savegame.
Openttd Openttd 1.0.1Openttd Openttd 1.0.0Openttd Openttd 1.0.4Openttd Openttd 1.0.5Openttd Openttd 1.0.3Openttd Openttd 1.1.0Openttd Openttd 0.4.8Openttd Openttd 0.7.0Openttd Openttd 0.5.2Openttd Openttd 0.7.3Openttd Openttd 0.1.2Openttd Openttd 0.1.1Openttd Openttd 0.5.3Openttd Openttd 0.2.1Openttd Openttd 0.3.2Openttd Openttd 0.3.4Openttd Openttd 0.5.0Openttd Openttd 0.6.0Openttd Openttd 0.4.7Openttd Openttd 0.3.7Openttd Openttd 1.0.2Openttd Openttd
7.5
CVSSv2
CVE-2011-3341
Multiple off-by-one errors in order_cmd.cpp in OpenTTD prior to 1.1.3 allow remote malicious users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted CMD_INSERT_ORDER command.
Openttd Openttd 1.0.0Openttd Openttd 1.0.3Openttd Openttd 1.0.2Openttd Openttd 1.1.0Openttd Openttd 0.4.8Openttd Openttd 0.7.0Openttd Openttd 0.5.2Openttd Openttd 0.7.3Openttd Openttd 0.1.1Openttd Openttd 0.7.5Openttd Openttd 0.2.1Openttd Openttd 0.3.2Openttd Openttd 0.3.4Openttd Openttd 0.3.3Openttd Openttd 0.5.0Openttd Openttd 0.5.1Openttd Openttd 0.6.0Openttd Openttd 0.4.7Openttd Openttd 0.5.3Openttd Openttd 1.0.5Openttd Openttd 1.1.1Openttd Openttd 0.6.3
4.6
CVSSv2
CVE-2011-3343
Multiple buffer overflows in OpenTTD prior to 1.1.3 allow local users to cause a denial of service (daemon crash) or possibly gain privileges via (1) a crafted BMP file with RLE compression or (2) crafted dimensions in a BMP file.
Openttd Openttd 1.0.0Openttd Openttd 1.0.3Openttd Openttd 1.1.0Openttd Openttd 1.0.5Openttd Openttd 0.7.0Openttd Openttd 0.7.2Openttd Openttd 0.5.2Openttd Openttd 0.7.1Openttd Openttd 0.1.2Openttd Openttd 0.1.1Openttd Openttd 1.0.1Openttd Openttd 1.0.4Openttd Openttd 1.1.2Openttd Openttd 1.1.1Openttd Openttd 0.6.0Openttd Openttd 0.6.2Openttd Openttd 0.6.3Openttd Openttd 0.1.3Openttd Openttd 0.7.4Openttd Openttd 0.5.3Openttd Openttd 0.3.0Openttd Openttd 0.5.0
5
CVSSv2
CVE-2010-2534
The NetworkSyncCommandQueue function in network/network_command.cpp in OpenTTD prior to 1.0.3 does not properly clear a pointer in a linked list, which allows remote malicious users to cause a denial of service (infinite loop and CPU consumption) via a crafted request, related to...
Openttd Openttd 0.6.0Openttd Openttd 0.4.8Openttd Openttd 0.4.0Openttd Openttd 0.6.2Openttd Openttd 0.1.3Openttd Openttd 0.5.3Openttd Openttd 0.3.2.1Openttd Openttd 0.3.2Openttd Openttd 0.5.0Openttd Openttd 1.0.3Openttd Openttd 1.0.2Openttd Openttd 1.0.0Openttd Openttd 0.7.3Openttd Openttd 0.7.1Openttd Openttd 0.7.0Openttd Openttd 0.4.5Openttd Openttd 0.4.0.1Openttd Openttd 0.6.1Openttd Openttd 0.1.1Openttd Openttd 0.1.4Openttd Openttd 0.3.0Openttd Openttd 0.5.1
4
CVSSv2
CVE-2010-0406
OpenTTD prior to 1.0.1 allows remote malicious users to cause a denial of service (file-descriptor exhaustion and daemon crash) by performing incomplete downloads of the map.
Openttd Openttd 0.6.0Openttd Openttd 0.4.0.1Openttd Openttd 0.4.0Openttd Openttd 0.6.2Openttd Openttd 0.1.3Openttd Openttd 0.2.1Openttd Openttd 0.5.3Openttd Openttd 0.3.2Openttd Openttd 0.5.0Openttd OpenttdOpenttd Openttd 0.3.7Openttd Openttd 0.6.1Openttd Openttd 0.2.0Openttd Openttd 0.3.1Openttd Openttd 0.3.0Openttd Openttd 0.5.1Openttd Openttd 0.4.7Openttd Openttd 0.4.6Openttd Openttd 0.4.5Openttd Openttd 0.5.2Openttd Openttd 0.7.4Openttd Openttd 0.1.2
6.5
CVSSv2
CVE-2010-0401
OpenTTD prior to 1.0.1 accepts a company password for authentication in response to a request for the server password, which allows remote authenticated users to bypass intended access restrictions or cause a denial of service (daemon crash) by sending a company password packet.
Openttd Openttd 0.4.8Openttd Openttd 0.4.7Openttd Openttd 0.6.0Openttd Openttd 0.5.2Openttd Openttd 0.7.4Openttd Openttd 0.5.3Openttd Openttd 0.3.4Openttd Openttd 0.3.6Openttd Openttd 0.5.0Openttd Openttd 0.4.6Openttd Openttd 0.4.5Openttd Openttd 0.4.0.1Openttd Openttd 0.1.2Openttd Openttd 0.1.1Openttd Openttd 0.1.4Openttd Openttd 0.1.3Openttd Openttd 0.6.1Openttd Openttd 0.6.2Openttd Openttd 0.3.1Openttd Openttd 0.3.0Openttd Openttd 0.3.2.1Openttd Openttd 0.3.2
6.5
CVSSv2
CVE-2010-0402
OpenTTD prior to 1.0.1 does not properly validate index values of certain items, which allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted in-game command.
Openttd Openttd 0.4.8Openttd Openttd 0.6.0Openttd Openttd 0.4.5Openttd Openttd 0.6.1Openttd Openttd 0.1.2Openttd Openttd 0.1.4Openttd Openttd 0.2.0Openttd Openttd 0.3.0Openttd Openttd 0.3.5Openttd Openttd 0.5.0Openttd Openttd 0.5.1Openttd Openttd 0.4.0Openttd Openttd 0.3.7Openttd Openttd 0.1.3Openttd Openttd 0.5.3Openttd Openttd 0.2.1Openttd Openttd 0.4.7Openttd Openttd 0.6.2Openttd Openttd 0.5.2Openttd Openttd 0.3.2.1Openttd Openttd 0.3.2Openttd Openttd 0.3.4
5
CVSSv2
CVE-2009-4007
Unspecified vulnerability in the NormaliseTrainConsist function in src/train_cmd.cpp in OpenTTD prior to 0.7.5-RC1 allows remote malicious users to cause a denial of service (daemon crash) via certain game actions involving a wagon and a dual-headed engine.
Openttd Openttd 0.1.2Openttd Openttd 0.3.0Openttd Openttd 0.3.2Openttd Openttd 0.4.0Openttd Openttd 0.3.5Openttd Openttd 0.4.7Openttd Openttd 0.4.8Openttd Openttd 0.5.3Openttd Openttd 0.5.1Openttd Openttd 0.6.0Openttd Openttd 0.6.2Openttd Openttd 0.2.0Openttd Openttd 0.3.1Openttd Openttd 0.4.0.1Openttd Openttd 0.3.6Openttd Openttd 0.5.0Openttd Openttd 0.5.2Openttd Openttd 0.6.1Openttd Openttd 0.1.3Openttd Openttd 0.2.1Openttd Openttd 0.4.5Openttd Openttd 0.3.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook