CVE-2011-3341
Multiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to...
Multiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted CMD_INSERT_ORDER command.
Exploit likelihood
What each source reports
NVD Score used
Multiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted CMD_INSERT_ORDER command.
- Record
CVE-2011-3341- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Multiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted CMD_INSERT_ORDER command.
- Record
CVE-2011-3341- Updated
- 2026-11-02
EUVDEUVD-2011-3305 No score
Multiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted CMD_INSERT_ORDER command.
- Record
EUVD-2011-3305- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j9vm-fj65-jhj3 No score
Multiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to...
Multiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted CMD_INSERT_ORDER command.
- Record
GHSA-j9vm-fj65-jhj3- Updated
- 2026-11-02
OSV No score
Multiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted CMD_INSERT_ORDER command.
- Record
CVE-2011-3341- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-3341 No score
Multiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted CMD_INSERT_ORDER command.
- Record
DEBIAN-CVE-2011-3341- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openttdDebian:12 |
before 1.1.3-1 | 1.1.3-1 |
openttdDebian:13 |
before 1.1.3-1 | 1.1.3-1 |
openttdDebian:14 |
before 1.1.3-1 | 1.1.3-1 |
openttdDebian:5.0 |
before 0.6.2-1+lenny4, plus listed versions 0.5.0-20.5.1-10.5.2-10.5.3-10.6.0-1 Show 7 moreShow less0.6.0-20.6.1-10.6.2-10.6.2-1+lenny10.6.2-1+lenny20.6.2~rc1-10.6.2~rc2-1 |
0.6.2-1+lenny4 |
openttdDebian:6.0 |
before 1.0.4-4, plus listed versions 1.0.4-3 |
1.0.4-4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-3341 is a high vulnerability (CVSS 7.5) in Openttd, published September 8, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.83%, the 90th percentile. Fixed in openttd 1.1.3-1.