CVE-2008-3577

Buffer overflow in src/openttd.cpp in OpenTTD before 0.6.2 allows local users to execute arbitrary code via a large filename supplied to the "-g" parameter in the ttd_main function. NOTE: it is unlikely that this issue would cross privilege boundaries in typical environments.

Link	Resource
http://sourceforge.net/project/shownotes.php?release_id=617243
http://www.securityfocus.com/bid/30525
http://secunia.com/advisories/34161
http://security.gentoo.org/glsa/glsa-200903-09.xml
http://bugs.gentoo.org/show_bug.cgi?id=233929
http://www.vupen.com/english/advisories/2008/2285
https://exchange.xforce.ibmcloud.com/vulnerabilities/44436

Configuration 1

cpe:2.3:a:openttd:openttd:0.6.0:rc1:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.1.3:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.1.2:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.4.8:rc2:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.2.1:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.4.0.1:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.2.0:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.6.1:rc2:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.6.0:beta2:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.5.0:rc1:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.3.3:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.3.1:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.5.3:rc1:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.4.7:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.3.6:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.3.4:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.5.0:rc2:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.6.0:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.1.4:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.6.0:beta1:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.3.0:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.5.3:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.5.0:rc3:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.5.0:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.5.3:rc3:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.4.0:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.5.2:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.6.1:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.6.0:beta4:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.5.2:rc1:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.6.0:beta3:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.6.1:rc1:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.4.5:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.5.1:rc1:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.4.6:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.5.3:rc2:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.3.2:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.1.1:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.5.0:rc4:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.4.8:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.5.1:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.5.1:rc2:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.5.0:rc5:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.3.5:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.3.2.1:*:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.6.0:beta5:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.5.1:rc3:*:*:*:*:*:* cpe:2.3:a:openttd:openttd:0.4.8:rc1:*:*:*:*:*:*

---

Published : 2008-08-10 09:41

Updated : 2017-08-08 01:31

---

NVD link : CVE-2008-3577

Mitre link : CVE-2008-3577

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer