|
|
| |
|
| |
openttd: multiple vulnerabilities
| Package(s): | openttd |
CVE #(s): | CVE-2011-3341
CVE-2011-3342
CVE-2011-3343
|
| Created: | September 20, 2011 |
Updated: | January 12, 2012 |
| Description: |
From the CVE entries:
Multiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted CMD_INSERT_ORDER command. (CVE-2011-3341)
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors related to (1) NAME, (2) PLYR, (3) CHTS, or (4) AIPL (aka AI config) chunk loading from a savegame. (CVE-2011-3342)
Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service (daemon crash) or possibly gain privileges via (1) a crafted BMP file with RLE compression or (2) crafted dimensions in a BMP file. (CVE-2011-3343) |
| Alerts: |
|
( Log in to post comments)
|
|
|