CVE-2011-3343 (GCVE-0-2011-3343)
Vulnerability from cvelistv5 – Published: 2011-09-08 18:00 – Updated: 2024-08-06 23:29
VLAI
EPSS
VEX
Summary
Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service (daemon crash) or possibly gain privileges via (1) a crafted BMP file with RLE compression or (2) crafted dimensions in a BMP file.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://security.openttd.org/en/CVE-2011-3343 | x_refsource_CONFIRM |
| http://lists.fedoraproject.org/pipermail/package-… | vendor-advisoryx_refsource_FEDORA |
| http://secunia.com/advisories/46075 | third-party-advisoryx_refsource_SECUNIA |
| http://www.debian.org/security/2012/dsa-2386 | vendor-advisoryx_refsource_DEBIAN |
| http://bugs.openttd.org/task/4746 | x_refsource_CONFIRM |
| http://openwall.com/lists/oss-security/2011/09/02/4 | mailing-listx_refsource_MLIST |
| http://bugs.openttd.org/task/4747 | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/49439 | vdb-entryx_refsource_BID |
| http://openwall.com/lists/oss-security/2011/09/06/2 | mailing-listx_refsource_MLIST |
Date Public
2011-09-02 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T23:29:56.766Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://security.openttd.org/en/CVE-2011-3343"
},
{
"name": "FEDORA-2011-12975",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066128.html"
},
{
"name": "46075",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/46075"
},
{
"name": "DSA-2386",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2012/dsa-2386"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://bugs.openttd.org/task/4746"
},
{
"name": "[oss-security] 20110902 CVE request for OpenTTD",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://openwall.com/lists/oss-security/2011/09/02/4"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://bugs.openttd.org/task/4747"
},
{
"name": "49439",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/49439"
},
{
"name": "[oss-security] 20110906 Re: CVE request for OpenTTD",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://openwall.com/lists/oss-security/2011/09/06/2"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2011-09-02T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service (daemon crash) or possibly gain privileges via (1) a crafted BMP file with RLE compression or (2) crafted dimensions in a BMP file."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2011-09-23T09:00:00.000Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://security.openttd.org/en/CVE-2011-3343"
},
{
"name": "FEDORA-2011-12975",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066128.html"
},
{
"name": "46075",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/46075"
},
{
"name": "DSA-2386",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2012/dsa-2386"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://bugs.openttd.org/task/4746"
},
{
"name": "[oss-security] 20110902 CVE request for OpenTTD",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://openwall.com/lists/oss-security/2011/09/02/4"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://bugs.openttd.org/task/4747"
},
{
"name": "49439",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/49439"
},
{
"name": "[oss-security] 20110906 Re: CVE request for OpenTTD",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://openwall.com/lists/oss-security/2011/09/06/2"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2011-3343",
"datePublished": "2011-09-08T18:00:00.000Z",
"dateReserved": "2011-08-30T00:00:00.000Z",
"dateUpdated": "2024-08-06T23:29:56.766Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2011-3343",
"date": "2026-09-22",
"epss": "0.0038",
"percentile": "0.31908"
},
"nvd": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:openttd:openttd:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6A6221EF-B876-4FBC-AF2E-961573DA68EC",
"versionEndIncluding": "1.1.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "499EFCAE-9309-4C26-A846-10396CBC628D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "6908E44D-3553-430D-B870-266971DC0D17",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "DEBDEF33-48E4-42F4-A725-838DA9191334",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.1.4:*:*:*:*:*:*:*",
"matchCriteriaId": "422B0D3E-503C-4CA6-83B9-4FC58BA898C6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "46557BD6-66A0-4892-9468-687A4B63F5B9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "6A186C5E-ACAA-47C8-9FA0-133E9D7F2900",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "24094775-BAF9-4C2E-8C38-86916E22B5A8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "B7CF73FA-09F6-4CE5-932E-BA6B43D66F1B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "77E87583-5769-4114-94F7-043897DA0FC6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.3.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "718E8C39-A59C-4576-B00D-31A8F0C1762C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "83B1A7D7-D920-41F3-8DE9-D39007DDDEFD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "327B826F-0F4E-420D-8C93-4551A4B9F190",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "FE12C455-5CA0-4581-A3F3-CC8867CCEEE3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "5DC5E23E-3A14-49B4-A676-AAA96F25D01D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "8520357A-27AF-4F48-9095-773F75AAC408",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "F65EA852-3C46-47D6-8D6B-DC3546165CC1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.4.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "D4441B6D-1A48-4DD4-AAAB-FC3B5F00DE4A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.4.5:*:*:*:*:*:*:*",
"matchCriteriaId": "985D96E7-0BAE-46DF-A1E2-BD4585C6CABF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.4.6:*:*:*:*:*:*:*",
"matchCriteriaId": "73062670-5CB9-4AB8-B45D-21E0D557FD49",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.4.7:*:*:*:*:*:*:*",
"matchCriteriaId": "876A0BCB-F792-4A21-85AB-5D7D63C3E987",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.4.8:*:*:*:*:*:*:*",
"matchCriteriaId": "97BFB677-F29E-451E-855A-452F8AE0A9D6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.4.8:rc1:*:*:*:*:*:*",
"matchCriteriaId": "99308463-E1A6-4018-819E-29043BFE8886",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.4.8:rc2:*:*:*:*:*:*",
"matchCriteriaId": "C9E8C9AB-C303-4FB0-AD1D-C7EE4E93E347",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "DF5AEFDA-322E-49CD-AE94-82020B9B7AE2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.5.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "6AF50B50-ED50-4BCD-8BAE-9161911A0FCF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.5.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "E3485EF5-F3DF-4622-92D9-B092F46D5AFE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.5.0:rc3:*:*:*:*:*:*",
"matchCriteriaId": "12EB77E6-94D0-4980-B392-59ACABEDB8D9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.5.0:rc4:*:*:*:*:*:*",
"matchCriteriaId": "3051AB9F-5C64-4D95-805F-8575B5BD39D0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.5.0:rc5:*:*:*:*:*:*",
"matchCriteriaId": "494DD878-5854-49DC-A0E1-2904D70582EB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "BFD07BE5-47E4-47E6-B6A2-CEC2BCC3E383",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.5.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "1A5AA729-0198-4644-9810-E501C3C47EE0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.5.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "1D5EC680-4686-4C04-957E-B597A1563F1B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.5.1:rc3:*:*:*:*:*:*",
"matchCriteriaId": "F2C02877-6FE8-4C98-9AB6-5E4D1AC49FFF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.5.2:*:*:*:*:*:*:*",
"matchCriteriaId": "89325227-4E0A-49FA-83C1-D0D5E2CEF45D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.5.2:rc1:*:*:*:*:*:*",
"matchCriteriaId": "21763CB0-1FFA-4FF4-AA6F-47614E8BEEB5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.5.3:*:*:*:*:*:*:*",
"matchCriteriaId": "A151DBA9-3A94-431F-BC22-C86E4268263B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.5.3:rc1:*:*:*:*:*:*",
"matchCriteriaId": "7246859E-A6CF-4617-A37A-BF17849D43F2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.5.3:rc2:*:*:*:*:*:*",
"matchCriteriaId": "85FA63BC-2292-49F8-A0E1-34C8497236C4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.5.3:rc3:*:*:*:*:*:*",
"matchCriteriaId": "78365F07-CF44-48FD-B048-2F510D147D0A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2CBAD231-4365-4A5F-9FD8-1EE13F7FC8A1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.6.0:beta1:*:*:*:*:*:*",
"matchCriteriaId": "B052159B-4CFF-47DE-A1B7-35C467AD73BD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.6.0:beta2:*:*:*:*:*:*",
"matchCriteriaId": "BDF5228B-B99A-4E4E-A66F-59275A36B28E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.6.0:beta3:*:*:*:*:*:*",
"matchCriteriaId": "5E5F1FE7-ADCB-42AD-AB99-0F17AD8E2FE3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.6.0:beta4:*:*:*:*:*:*",
"matchCriteriaId": "CD6E4B8D-6C12-4053-A8D2-F64F92AF733A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.6.0:beta5:*:*:*:*:*:*",
"matchCriteriaId": "9B9BDCD3-85B9-4C17-B625-FC7F62450FB4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.6.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "8648A48E-BCF9-4B34-B1FF-16B780C2797D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "3B0C66D6-F933-43B1-8BC0-72625E70442C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.6.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "72070978-F3B9-46D6-A3FD-0932D751AD86",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.6.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "5D6483EA-FC98-4367-A34B-795F858815E6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "E775B6E0-8887-4BB8-AB39-EDD2FAC7A61E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.6.2:rc1:*:*:*:*:*:*",
"matchCriteriaId": "DAE2A501-3F40-4BFD-B600-AD122BB8EFD4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.6.2:rc2:*:*:*:*:*:*",
"matchCriteriaId": "D49CDF39-F0F2-4B48-87FC-4F984D439497",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.6.3:*:*:*:*:*:*:*",
"matchCriteriaId": "325AB3F6-AB2C-4340-A566-816CB65134F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.6.3:rc1:*:*:*:*:*:*",
"matchCriteriaId": "D694BCA6-9FF4-4447-85F8-99E7F05C8509",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "5A9AACD8-B19A-4466-B68D-FAA074240F38",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.7.0:beta1:*:*:*:*:*:*",
"matchCriteriaId": "6BE4AC57-8B55-42D9-969E-6201339941BD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.7.0:beta2:*:*:*:*:*:*",
"matchCriteriaId": "6FF99FCC-D8B8-4D83-AF51-DC98E1B99FED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.7.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "23706F5C-601D-4502-A23B-B92C3A1EC575",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.7.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "2830F3D8-A8C1-4296-A734-063A003B6DEA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "F975E7D2-864D-4DD7-8564-1B00F42110D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.7.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "48B7FC7C-5F22-47B3-9892-3750947D673D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.7.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "EAD5F10E-9AC3-4A34-882A-21D2EBF0B2AA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.7.1:rc3:*:*:*:*:*:*",
"matchCriteriaId": "8911F113-1519-481A-A2B2-0EE15B1B482A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "FC474337-934C-40F6-B6D8-0DA6C0874067",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.7.2:rc1:*:*:*:*:*:*",
"matchCriteriaId": "6B9881F6-F1ED-4E2E-8816-0FAF3FF1BFBA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.7.2:rc2:*:*:*:*:*:*",
"matchCriteriaId": "F7139F5C-24BC-470C-880B-7D3B7FB378A8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.7.3:*:*:*:*:*:*:*",
"matchCriteriaId": "94B07B0C-31AF-46C3-BB4A-4DC8632E9780",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.7.3:rc1:*:*:*:*:*:*",
"matchCriteriaId": "DFC40FC9-B80F-4203-9357-D6D736C2F870",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.7.3:rc2:*:*:*:*:*:*",
"matchCriteriaId": "B40E53AA-7327-46D0-A1D9-ED680D1F7DD4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.7.4:*:*:*:*:*:*:*",
"matchCriteriaId": "1E1E187C-6F26-4604-9720-0C516E8BAF9E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.7.4:rc1:*:*:*:*:*:*",
"matchCriteriaId": "AAB61223-CC9F-44A4-96A9-09CCE32B85F2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.7.5:*:*:*:*:*:*:*",
"matchCriteriaId": "18264F19-D58E-46C7-AA06-B47EFF15E165",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:0.7.5:rc1:*:*:*:*:*:*",
"matchCriteriaId": "14A1DC8C-B476-49E2-8FE7-2FFA5CA28267",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "6B98521C-E198-4B1C-9E12-D38E919ECEE6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.0.0:beta1:*:*:*:*:*:*",
"matchCriteriaId": "3B784070-8D6E-4E90-9ECB-5501B70DD8E9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.0.0:beta2:*:*:*:*:*:*",
"matchCriteriaId": "8C72B46F-72AC-4E11-B8F6-81E59B5083F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.0.0:beta3:*:*:*:*:*:*",
"matchCriteriaId": "FF964E94-DD96-4ED5-B703-56146510F1C1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.0.0:beta4:*:*:*:*:*:*",
"matchCriteriaId": "B0B42597-ECA1-439C-9FE6-35E6066098F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.0.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "756D4F4A-7B5B-46FF-8AA8-B3E39F9822A9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.0.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "E98D59D3-C5CF-4568-B0DB-339F56901E35",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.0.0:rc3:*:*:*:*:*:*",
"matchCriteriaId": "D5BCF1D4-EBE5-40FD-99BF-9AF222F60662",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "4D3D74EC-A83E-4BE2-BA20-28F67A2A21DF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.0.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "49FD4CD9-E154-40DB-83EF-5178B883BEE3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.0.1:rc2:*:*:*:*:*:*",
"matchCriteriaId": "641A4BFB-434B-437B-8040-6522A111EA5C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "794D67C0-9B24-42C9-B4E4-C6267902B229",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.0.2:rc1:*:*:*:*:*:*",
"matchCriteriaId": "F1288AE8-47EA-4821-8A47-DF3E08F47644",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "8F26F21B-D1D3-407B-95C2-58EAB997D392",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.0.3:rc1:*:*:*:*:*:*",
"matchCriteriaId": "AEECF013-7EDF-431D-94CF-E64DAF741101",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "1B30380F-BB95-4FCB-860E-8C86ABA75BFA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.0.4:rc1:*:*:*:*:*:*",
"matchCriteriaId": "FF913C00-C0DB-4BDC-A109-A5FDAD646365",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.0.5:*:*:*:*:*:*:*",
"matchCriteriaId": "CAD2DE8F-82AD-4C3E-B1EB-BA02777B5645",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.0.5:rc1:*:*:*:*:*:*",
"matchCriteriaId": "ED3EBB64-EAAB-40D1-99D9-DE3268E92C13",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.0.5:rc2:*:*:*:*:*:*",
"matchCriteriaId": "F7B31694-52D7-4972-AAB2-E24394E7D240",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "588D0225-C50A-4B16-96A8-3E437D7DF29C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.1.0:beta1:*:*:*:*:*:*",
"matchCriteriaId": "71C8304E-AB46-490D-B1F8-323D9E0CD3B4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.1.0:beta2:*:*:*:*:*:*",
"matchCriteriaId": "84AA954C-1295-48CF-A00D-2AB8A412A9DF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.1.0:beta3:*:*:*:*:*:*",
"matchCriteriaId": "92AF1B69-FC2B-403F-AD02-CF912CD01720",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.1.0:beta4:*:*:*:*:*:*",
"matchCriteriaId": "7654B5AE-A0A1-43D2-94C7-ECADD9735780",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.1.0:beta5:*:*:*:*:*:*",
"matchCriteriaId": "3CA76279-289F-4A92-84BD-E9431B9EA7BC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.1.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "6374F311-675A-4D2D-9F96-3EDFEC09A597",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.1.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "832F9ADB-6391-4AD3-9DC8-AC12599CF6CE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.1.0:rc3:*:*:*:*:*:*",
"matchCriteriaId": "C6F5AD93-75DE-483A-ABAD-666073C9A364",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "FAA356B4-EA2E-483E-B5B7-E33D9AABA985",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.1.1:rc1:*:*:*:*:*:*",
"matchCriteriaId": "17ABF6F5-D32E-48A9-BFB3-F50064C20BAF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.1.2:rc1:*:*:*:*:*:*",
"matchCriteriaId": "FF52CC4D-19C8-4F5E-A079-7F4C1B93227B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:openttd:openttd:1.1.2:rc2:*:*:*:*:*:*",
"matchCriteriaId": "6D943E73-29C1-428F-8060-CB8457E945FA",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service (daemon crash) or possibly gain privileges via (1) a crafted BMP file with RLE compression or (2) crafted dimensions in a BMP file."
},
{
"lang": "es",
"value": "M\u00faltiples desbordamientos de buffer en OpenTTD antes de v1.1.3, permite a usuarios locales provocar una denegaci\u00f3n de servicio (ca\u00edda del demonio) o posiblemente ganar privilegios a trav\u00e9s de (1) un archivo BMP modificado con compresi\u00f3n RLE o (2) un archivo BMP con dimensiones modificadas."
}
],
"id": "CVE-2011-3343",
"lastModified": "2026-04-29T01:13:23.040",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2011-09-08T18:55:01.627",
"references": [
{
"source": "secalert@redhat.com",
"tags": [
"Patch"
],
"url": "http://bugs.openttd.org/task/4746"
},
{
"source": "secalert@redhat.com",
"tags": [
"Patch"
],
"url": "http://bugs.openttd.org/task/4747"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066128.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Patch"
],
"url": "http://openwall.com/lists/oss-security/2011/09/02/4"
},
{
"source": "secalert@redhat.com",
"tags": [
"Patch"
],
"url": "http://openwall.com/lists/oss-security/2011/09/06/2"
},
{
"source": "secalert@redhat.com",
"url": "http://secunia.com/advisories/46075"
},
{
"source": "secalert@redhat.com",
"url": "http://security.openttd.org/en/CVE-2011-3343"
},
{
"source": "secalert@redhat.com",
"url": "http://www.debian.org/security/2012/dsa-2386"
},
{
"source": "secalert@redhat.com",
"url": "http://www.securityfocus.com/bid/49439"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://bugs.openttd.org/task/4746"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://bugs.openttd.org/task/4747"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066128.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://openwall.com/lists/oss-security/2011/09/02/4"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://openwall.com/lists/oss-security/2011/09/06/2"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/46075"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://security.openttd.org/en/CVE-2011-3343"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.debian.org/security/2012/dsa-2386"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/49439"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-119"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
},
"redhat_vex": {
"current_release_date": "2025-11-21T12:55:54+00:00",
"cve": "CVE-2011-3343",
"id": "CVE-2011-3343",
"initial_release_date": "2011-08-09T00:00:00+00:00",
"product_status:known_not_affected": "1",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "Security update available (in testing) for openttd",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-3343.json",
"version": "3"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…