Vulnerability Details : CVE-2013-6411
Potential exploit
The HandleCrashedAircraft function in aircraft_cmd.cpp in OpenTTD 0.3.6 through 1.3.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) by crashing an aircraft outside of the map.
Vulnerability category: Denial of service
Products affected by CVE-2013-6411
- cpe:2.3:a:openttd:openttd:0.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:0.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:0.4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:0.4.5:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:0.4.6:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:0.4.7:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:0.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:0.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:0.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:0.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:0.4.8:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:0.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:0.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:0.7.4:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.0.3:rc1:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.0.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.0.0:beta4:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.0.0:beta3:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:0.7.3:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:0.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.0.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.0.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:0.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:0.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.0.2:rc1:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.0.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.0.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:0.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.0.1:rc2:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.0.1:rc1:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:0.7.5:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:0.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.0.5:rc2:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.0.4:rc1:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.0.5:rc1:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:openttd:openttd:1.3.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2013-6411
2.29%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 83 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2013-6411
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
CWE ids for CVE-2013-6411
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-6411
-
http://bugs.openttd.org/task/5820
FS#5820 : Openttd crash on airplane crash
-
http://www.securityfocus.com/bid/64003
OpenTTD 'MapSize()' Function Denial Of Service Vulnerability
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/89334
OpenTTD aircraft crash denial of service CVE-2013-6411 Vulnerability Report
-
http://seclists.org/oss-sec/2013/q4/375
oss-sec: Re: CVE request for OpenTTD
-
http://vcs.openttd.org/svn/changeset/26134
GitHub - OpenTTD/OpenTTD: OpenTTD is an open source simulation game based upon Transport Tycoon DeluxeExploit;Patch
-
http://secunia.com/advisories/56218
Sign in
-
https://security.openttd.org/en/CVE-2013-6411
OpenTTD - Security tracker -
-
http://secunia.com/advisories/55589
Sign inVendor Advisory
-
http://lists.opensuse.org/opensuse-updates/2013-12/msg00095.html
openSUSE-SU-2013:1932-1: moderate: update for openttd
Jump to