Back to Database
Status published
Medium
CVE-2010-0402
OpenTTD before 1.0.1 does not properly validate index values of...
Vulnerability Description
OpenTTD before 1.0.1 does not properly validate index values of certain items, which allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted in-game command.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-0402
Credits & Attribution
No credits recorded in the NVD database.
More from openttd
View All →CVE-2013-6411
The HandleCrashedAircraft function in aircraft_cmd.cpp in OpenTTD 0.3.6 through 1.3.2...
Medium
5
CVE-2012-3436
OpenTTD 0.6.0 through 1.2.1 does not properly validate requests to...
Medium
5
CVE-2012-0049
OpenTTD before 1.1.5 contains a Denial of Service (slow read...
Medium
4.3
CVE-2012-0048
OpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause a...
Medium
4.3
CVE-2011-3343
Multiple buffer overflows in OpenTTD before 1.1.3 allow local users...
Medium
4.6
Affected Vendor
openttd
View all reports →Affected Software
openttd
Vulnerable Versions:
0, 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.2.0, 0.2.1, 0.3.0, 0.3.1, 0.3.2, 0.3.2.1, 0.3.3, 0.3.4, 0.3.5, 0.3.6, 0.3.7, 0.4.0, 0.4.0.1, 0.4.5, 0.4.6, 0.4.7, 0.4.8, 0.5.0, 0.5.1, 0.5.2, 0.5.3, 0.6.0, 0.6.1, 0.6.2, 0.7.4
Timeline
Official Publish:
May 4th, 2010
Last Modified:
September 16th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.