Stack overflow

2015-10-2910:59:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

Low

0.036 Low

EPSS

Percentile

91.7%

JSON

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to (1) the SetGroupSequenceEx na_setgroupsequenceex function, (2) the FormatDate julptostr function, and (3) the UserFindingCodes addtocl function.

CPENameOperatorVersion
medcin_enginele2.22.20142.166

CPE	Name	Operator	Version
	medcin_engine	le	2.22.20142.166

References

www.kb.cert.org/vuls/id/675052

www.securifera.com/advisories/CVE-2015-2898-2901/