CVE-2008-3576: Openttd

High severity, CVSS 10.0. EPSS: 6.3% chance of exploitation in the next 30 days.

Buffer overflow in the TruncateString function in src/gfx.cpp in OpenTTD before 0.6.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted string. NOTE: some of these details are obtained from third party information.

Affected products

• Openttd Openttd: up to and including 0.6.2-rc2; version 0.6.1 only; version 0.6.2-rc1 only

Published 2008-08-10. Last modified 2026-06-16.