CVE-2011-3342
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of...
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors related to (1) NAME, (2) PLYR, (3) CHTS, or (4) AIPL (aka AI config) chunk loading from a savegame.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors related to (1) NAME, (2) PLYR, (3) CHTS, or (4) AIPL (aka AI config) chunk loading from a savegame.
- Record
CVE-2011-3342- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors related to (1) NAME, (2) PLYR, (3) CHTS, or (4) AIPL (aka AI config) chunk loading from a savegame.
- Record
CVE-2011-3342- Updated
- 2026-11-02
EUVDEUVD-2011-3306No score
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors related to (1) NAME, (2) PLYR, (3) CHTS, or (4) AIPL (aka AI config) chunk loading from a savegame.
- Record
EUVD-2011-3306- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gccw-fwp2-4jcjNo score
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of...
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors related to (1) NAME, (2) PLYR, (3) CHTS, or (4) AIPL (aka AI config) chunk loading from a savegame.
- Record
GHSA-gccw-fwp2-4jcj- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVNo score
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors related to (1) NAME, (2) PLYR, (3) CHTS, or (4) AIPL (aka AI config) chunk loading from a savegame.
- Record
CVE-2011-3342- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-3342No score
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors related to (1) NAME, (2) PLYR, (3) CHTS, or (4) AIPL (aka AI config) chunk loading from a savegame.
- Record
DEBIAN-CVE-2011-3342- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openttdDebian:12 | before 1.1.3-1 | 1.1.3-1 |
openttdDebian:13 | before 1.1.3-1 | 1.1.3-1 |
openttdDebian:14 | before 1.1.3-1 | 1.1.3-1 |
openttdDebian:5.0 From an advisory covering 3 CVEs | before 0.6.2-1+lenny4, plus listed versions 0.5.0-20.5.1-10.5.2-10.5.3-10.6.0-1 Show 7 moreShow less0.6.0-20.6.1-10.6.2-10.6.2-1+lenny10.6.2-1+lenny20.6.2~rc1-10.6.2~rc2-1 | 0.6.2-1+lenny4 |
openttdDebian:6.0 From an advisory covering 3 CVEs | before 1.0.4-4, plus listed versions 1.0.4-3 | 1.0.4-4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-3342 is a high vulnerability (CVSS 7.5) in Openttd, published September 8, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.01%, the 92nd percentile. Fixed in openttd 1.1.3-1.