CVE-2013-6411 - CVE House
Back to Database
Status published Medium CVE-2013-6411

The HandleCrashedAircraft function in aircraft_cmd.cpp in OpenTTD 0.3.6 through 1.3.2...

Vulnerability Description

The HandleCrashedAircraft function in aircraft_cmd.cpp in OpenTTD 0.3.6 through 1.3.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) by crashing an aircraft outside of the map.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-6411

Credits & Attribution

No credits recorded in the NVD database.

References

More from openttd

View All →
CVE-2012-3436
OpenTTD 0.6.0 through 1.2.1 does not properly validate requests to...
Medium 5
CVE-2012-0049
OpenTTD before 1.1.5 contains a Denial of Service (slow read...
Medium 4.3
CVE-2012-0048
OpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause a...
Medium 4.3
CVE-2011-3343
Multiple buffer overflows in OpenTTD before 1.1.3 allow local users...
Medium 4.6
CVE-2011-3342
Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers...
High 7.5

Affected Vendor

Affected Software

openttd
Vulnerable Versions:
0.3.6, 0.4.0, 0.4.0.1, 0.4.5, 0.4.6, 0.4.7, 0.4.8, 0.5.0, 0.5.1, 0.5.2, 0.5.3, 0.6.0, 0.6.1, 0.6.2, 0.6.3, 0.7.0, 0.7.1, 0.7.2, 0.7.3, 0.7.4, 0.7.5, 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.3.1, 1.3.2

Timeline

Official Publish: December 14th, 2013
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.