CVE:CVE-2008-3577
CNNVD:CNNVD-200808-127
Openttd是模仿Transport Tycoon的开源游戏。
Openttd 0.6.2之前版本中src/openttd.cpp文件存在缓冲区溢出漏洞。本地用户可一通过向-g参数提供一个超大的文件名触发缓冲区溢出。
solution:Upgrade openttd openttd to a higher version than 0.1.1,0.1.2,0.1.3,0.1.4,0.2.0,0.2.1,0.3.0,0.3.1,0.3.2,0.3.2.1,0.3.3,0.3.4,0.3.5,0.3.6,0.4.0,0.4.0.1,0.4.5,0.4.6,0.4.7,0.4.8,0.4.8:rc1,0.4.8:rc2,0.5.0,0.5.0:rc1,0.5.0:rc2,0.5.0:rc3,0.5.0:rc4,0.5.0:rc5,0.5.1,0.5.1:rc1,0.5.1:rc2,0.5.1:rc3,0.5.2,0.5.2:rc1,0.5.3,0.5.3:rc1,0.5.3:rc2,0.5.3:rc3,0.6.0,0.6.0:beta1,0.6.0:beta2,0.6.0:beta3,0.6.0:beta4,0.6.0:beta5,0.6.0:rc1,0.6.1,0.6.1:rc1,0.6.1:rc2,and avoid the version 0.1.1,0.1.2,0.1.3,0.1.4,0.2.0,0.2.1,0.3.0,0.3.1,0.3.2,0.3.2.1,0.3.3,0.3.4,0.3.5,0.3.6,0.4.0,0.4.0.1,0.4.5,0.4.6,0.4.7,0.4.8,0.4.8:rc1,0.4.8:rc2,0.5.0,0.5.0:rc1,0.5.0:rc2,0.5.0:rc3,0.5.0:rc4,0.5.0:rc5,0.5.1,0.5.1:rc1,0.5.1:rc2,0.5.1:rc3,0.5.2,0.5.2:rc1,0.5.3,0.5.3:rc1,0.5.3:rc2,0.5.3:rc3,0.6.0,0.6.0:beta1,0.6.0:beta2,0.6.0:beta3,0.6.0:beta4,0.6.0:beta5,0.6.0:rc1,0.6.1,0.6.1:rc1,0.6.1:rc2