CVE-2006-1998: Low severity OpenTTD OpenTTD vulnerability
Published Apr 25, 2006
·Updated
OpenTTD 0.4.7 and earlier allows local users to cause a denial of service (application exit) via a large invalid error number, which triggers an error.
Affected Software
19 affected components
OpenTTD OpenTTD=0.1.1
OpenTTD OpenTTD=0.1.2
OpenTTD OpenTTD=0.1.3
OpenTTD OpenTTD=0.1.4
OpenTTD OpenTTD=0.2.0
OpenTTD OpenTTD=0.2.1
OpenTTD OpenTTD=0.3.0
OpenTTD OpenTTD=0.3.1
OpenTTD OpenTTD=0.3.2
OpenTTD OpenTTD=0.3.2.1
OpenTTD OpenTTD=0.3.4
OpenTTD OpenTTD=0.3.5
OpenTTD OpenTTD=0.3.6
OpenTTD OpenTTD=0.3.7
OpenTTD OpenTTD=0.4.0
OpenTTD OpenTTD=0.4.0.1
OpenTTD OpenTTD=0.4.5
OpenTTD OpenTTD=0.4.6
OpenTTD OpenTTD=0.4.7
Remediation
Patch Available
Event History
Apr 25, 2006
CVE Published
12:50 PM
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-1998?
CVE-2006-1998 has been classified as a denial of service vulnerability that can lead to application crashes.
2
How do I fix CVE-2006-1998?
To mitigate CVE-2006-1998, update OpenTTD to version 0.4.8 or later, as this vulnerability is fixed in those versions.
3
Who is affected by CVE-2006-1998?
Local users running OpenTTD versions 0.4.7 and earlier are affected by CVE-2006-1998.
4
What kind of attack does CVE-2006-1998 involve?
CVE-2006-1998 involves sending a large invalid error number that triggers a denial of service in the application.
5
Can CVE-2006-1998 be exploited remotely?
No, CVE-2006-1998 requires local access to the system to exploit the vulnerability.