The NetworkSyncCommandQueue function in network/network_command.cpp in OpenTTD before 1.0.3 does not properly clear a pointer in a linked list, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted request, related to the client command queue.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2010-07-28 12:48
Updated : 2017-08-17 01:32
NVD link : CVE-2010-2534
Mitre link : CVE-2010-2534
CVE.ORG link : CVE-2010-2534
JSON object : View
Products Affected
openttd
- openttd
CWE
CWE-399
Resource Management Errors