CVE-2008-3577: Buffer overflow in src/openttd.cpp in OpenTTD before 0.6.2 allows local users to execute arbitrary code via...

Security readout for executives and security teams

CVE-2008-3577 is an old OpenTTD local buffer overflow. A user who can run OpenTTD could trigger memory corruption by supplying an overly large filename to the -g option. The CVE notes this is unlikely to cross privilege boundaries in typical environments. Exposure is most plausible on legacy systems still running OpenTTD before 0.6.2, especially shared machines or packaged installations from that era. Modern deployments are unlikely to be affected unless they intentionally retain old binaries. Treat this as low priority unless OpenTTD before 0.6.2 exists on shared or sensitive systems. The business risk is limited by local-only execution and weak evidence of privilege-boundary impact. Mitigation focus: Upgrade OpenTTD to 0.6.2 or later where this software is present.; Use supported distribution packages rather than legacy manually installed binaries.; Avoid launching OpenTTD with untrusted filenames passed to the -g option..

Prepared

Jun 28, 2026, 18:33 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.