CVE-2012-3436

OpenTTD 0.6.0-1.2.1 - Denial of Service via Water Tile Clear Request

Title source: llm
STIX 2.1

Description

OpenTTD 0.6.0 through 1.2.1 does not properly validate requests to clear a water tile, which allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a certain sequence of steps related to "the water/coast aspect of tiles which also have railtracks on one half."

References (11)

Core 11
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/50042
Various Sources x_refsource_confirm
http://security.openttd.org/en/CVE-2012-3436
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/07/28/7
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2012-08/msg00043.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/54720
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/07/31/5
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/77266
Exploit x_refsource_confirm
http://vcs.openttd.org/svn/changeset/24449
Various Sources x_refsource_confirm
http://bugs.openttd.org/task/5254
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/07/27/5
Various Sources x_refsource_confirm
http://vcs.openttd.org/svn/changeset/24439

Scores

EPSS 0.0338
EPSS Percentile 87.4%

Details

CWE
CWE-20
Status published
Products (24)
openttd/openttd 0.6.0
openttd/openttd 0.6.1
openttd/openttd 0.6.2
openttd/openttd 0.6.3
openttd/openttd 0.7.0
openttd/openttd 0.7.1
openttd/openttd 0.7.2
openttd/openttd 0.7.3
openttd/openttd 0.7.4
openttd/openttd 0.7.5
... and 14 more
Published Oct 09, 2012
Tracked Since Feb 18, 2026