{"id":"CVE-2011-3341","details":"Multiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted CMD_INSERT_ORDER command.","modified":"2026-04-10T03:41:56.243156Z","published":"2011-09-08T18:55:01Z","references":[{"type":"ADVISORY","url":"http://secunia.com/advisories/46075"},{"type":"ADVISORY","url":"http://www.debian.org/security/2012/dsa-2386"},{"type":"FIX","url":"http://bugs.openttd.org/task/4745"},{"type":"FIX","url":"http://bugs.openttd.org/task/4745/getfile/7707/fixcmds.diff"},{"type":"FIX","url":"http://openwall.com/lists/oss-security/2011/09/02/4"},{"type":"FIX","url":"http://openwall.com/lists/oss-security/2011/09/06/2"},{"type":"WEB","url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066128.html"},{"type":"WEB","url":"http://security.openttd.org/en/CVE-2011-3341"},{"type":"WEB","url":"http://www.securityfocus.com/bid/49439"}],"schema_version":"1.7.5"}