CVE-2013-6411

Name of the Vulnerable Software and Affected Versions OpenTTD versions 0.3.6 through 1.3.2

Description The issue allows remote attackers to cause a denial of service by crashing an aircraft outside of the map, resulting in an out-of-bounds read and crash. This is due to a problem in the HandleCrashedAircraft function.

Recommendations For OpenTTD versions 0.3.6 through 1.3.2, consider disabling the HandleCrashedAircraft function as a temporary workaround until a patch is available.