5

CVE-2012-3436

Exploit
OpenTTD 0.6.0 through 1.2.1 does not properly validate requests to clear a water tile, which allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a certain sequence of steps related to "the water/coast aspect of tiles which also have railtracks on one half."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Openttd ≫ Openttd Version 0.6.0
Openttd ≫ Openttd Version 0.6.1
Openttd ≫ Openttd Version 0.6.2
Openttd ≫ Openttd Version 0.6.3
Openttd ≫ Openttd Version 0.7.0
Openttd ≫ Openttd Version 0.7.1
Openttd ≫ Openttd Version 0.7.2
Openttd ≫ Openttd Version 0.7.3
Openttd ≫ Openttd Version 0.7.4
Openttd ≫ Openttd Version 0.7.5
Openttd ≫ Openttd Version 1.0.0
Openttd ≫ Openttd Version 1.0.0 Update beta1
Openttd ≫ Openttd Version 1.0.0 Update beta2
Openttd ≫ Openttd Version 1.0.0 Update beta3
Openttd ≫ Openttd Version 1.0.0 Update beta4
Openttd ≫ Openttd Version 1.0.0 Update rc1
Openttd ≫ Openttd Version 1.0.0 Update rc2
Openttd ≫ Openttd Version 1.0.0 Update rc3
Openttd ≫ Openttd Version 1.0.1
Openttd ≫ Openttd Version 1.0.1 Update rc1
Openttd ≫ Openttd Version 1.0.1 Update rc2
Openttd ≫ Openttd Version 1.0.2
Openttd ≫ Openttd Version 1.0.2 Update rc1
Openttd ≫ Openttd Version 1.0.3
Openttd ≫ Openttd Version 1.0.3 Update rc1
Openttd ≫ Openttd Version 1.0.4
Openttd ≫ Openttd Version 1.0.4 Update rc1
Openttd ≫ Openttd Version 1.0.5
Openttd ≫ Openttd Version 1.0.5 Update rc1
Openttd ≫ Openttd Version 1.0.5 Update rc2
Openttd ≫ Openttd Version 1.1.0
Openttd ≫ Openttd Version 1.1.1
Openttd ≫ Openttd Version 1.1.2
Openttd ≫ Openttd Version 1.1.3
Openttd ≫ Openttd Version 1.1.4
Openttd ≫ Openttd Version 1.1.5
Openttd ≫ Openttd Version 1.2.0
Openttd ≫ Openttd Version 1.2.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.38% 0.872
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://bugs.openttd.org/task/5254
http://lists.opensuse.org/opensuse-updates/2012-08/msg00043.html
http://secunia.com/advisories/50042
Vendor Advisory
http://security.openttd.org/en/CVE-2012-3436
http://vcs.openttd.org/svn/changeset/24439
http://vcs.openttd.org/svn/changeset/24449
Exploit
http://www.openwall.com/lists/oss-security/2012/07/27/5
http://www.openwall.com/lists/oss-security/2012/07/28/7
http://www.openwall.com/lists/oss-security/2012/07/31/5
http://www.securityfocus.com/bid/54720
https://exchange.xforce.ibmcloud.com/vulnerabilities/77266