CVE-2011-3342
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of...
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors related to (1) NAME, (2) PLYR, (3) CHTS, or (4) AIPL (aka AI config) chunk loading from a savegame.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors related to (1) NAME, (2) PLYR, (3) CHTS, or (4) AIPL (aka AI config) chunk loading from a savegame.
- Record
CVE-2011-3342- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors related to (1) NAME, (2) PLYR, (3) CHTS, or (4) AIPL (aka AI config) chunk loading from a savegame.
- Record
CVE-2011-3342- Updated
- 2026-11-02
EUVDEUVD-2011-3306 No score
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors related to (1) NAME, (2) PLYR, (3) CHTS, or (4) AIPL (aka AI config) chunk loading from a savegame.
- Record
EUVD-2011-3306- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gccw-fwp2-4jcj No score
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of...
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors related to (1) NAME, (2) PLYR, (3) CHTS, or (4) AIPL (aka AI config) chunk loading from a savegame.
- Record
GHSA-gccw-fwp2-4jcj- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors related to (1) NAME, (2) PLYR, (3) CHTS, or (4) AIPL (aka AI config) chunk loading from a savegame.
- Record
CVE-2011-3342- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-3342 No score
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors related to (1) NAME, (2) PLYR, (3) CHTS, or (4) AIPL (aka AI config) chunk loading from a savegame.
- Record
DEBIAN-CVE-2011-3342- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openttdDebian:12 |
before 1.1.3-1 | 1.1.3-1 |
openttdDebian:13 |
before 1.1.3-1 | 1.1.3-1 |
openttdDebian:14 |
before 1.1.3-1 | 1.1.3-1 |
openttdDebian:5.0 From an advisory covering 3 CVEs |
before 0.6.2-1+lenny4, plus listed versions 0.5.0-20.5.1-10.5.2-10.5.3-10.6.0-1 Show 7 moreShow less0.6.0-20.6.1-10.6.2-10.6.2-1+lenny10.6.2-1+lenny20.6.2~rc1-10.6.2~rc2-1 |
0.6.2-1+lenny4 |
openttdDebian:6.0 From an advisory covering 3 CVEs |
before 1.0.4-4, plus listed versions 1.0.4-3 |
1.0.4-4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-3342 is a high vulnerability (CVSS 7.5) in Openttd, published September 8, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.01%, the 92nd percentile. Fixed in openttd 1.1.3-1.