CVE-2011-3341

Name of the Vulnerable Software and Affected Versions OpenTTD versions prior to 1.1.3

Description The issue is caused by multiple off-by-one errors in the order cmd.cpp file, allowing remote attackers to potentially execute arbitrary code or cause a denial of service by crashing the daemon. This can be achieved by sending a crafted CMD INSERT ORDER command.

Recommendations For versions prior to 1.1.3, update to version 1.1.3 or later to resolve the issue.