CVE-2014-9192

CVE-2014-9192 is a concrete integer-overflow vulnerability in Trihedral VTScada (formerly VTS) HTTP server. The flaw allows remote attackers to trigger an enormous memory allocation by sending crafted requests (notably with problematic Content-Length handling), causing the VTScada server to crash...

Trihedral Engineering Limited VTScada Integer Overflow Vulnerability

OVERVIEW An anonymous researcher working with HP’s Zero Day Initiative has identified an integer overflow vulnerability in Trihedral Engineering Ltd’s VTScada application. Trihedral Engineering Limited has produced a patch that mitigates this vulnerability. This vulnerability could be exploited...