CVE-2014-9192
11.12.2014, 15:59
Integer overflow in Trihedral Engineering VTScada (formerly VTS) 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause a denial of service (server crash) via a crafted request, which triggers a large memory allocation.Enginsight
| Vendor | Product | Version |
|---|---|---|
| trihedral | vtscada | 6.5 ≤ 𝑥 < 9.1.20 |
| trihedral | vtscada | 10.0 ≤ 𝑥 < 10.2.22 |
| trihedral | vtscada | 11.0 ≤ 𝑥 < 11.1.07 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-190 - Integer Overflow or WraparoundThe software performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.
- CWE-189 -