CVE-2015-2900-Exploit

CVE-2015-2898-2901, CVE-2015-6006 POC Exploit & Metasploit module This is a proof of concept exploit for version 2.22.20142.166 and prior of the MEDCIN Engine medcinserv.exe or medcinservv22.exe. More details about the vulnerabilities can be found at:...

EUVD-2015-2987

Malware in sbrugna...

MEDCIN engine of the exploitability of the vulnerability details-vulnerability warning-the black bar safety net

! Science: the MEDCIN engine is a service to doctors and nurses electronic medical records system. A few months ago, I was in the MEDCIN engine to older versions of the safety assessment found a loophole. So I to the Supplier a report of the vulnerabilities and then repair, after viewing the...

CVE-2015-6006

The AddUserFinding implementation in Medicomp MEDCIN Engine 2.22.20153.x before 2.22.20153.226 might allow remote attackers to execute arbitrary code or cause a denial of service integer truncation and heap-based buffer overflow via a crafted packet on port 8190...

Heap overflow

The AddUserFinding implementation in Medicomp MEDCIN Engine 2.22.20153.x before 2.22.20153.226 might allow remote attackers to execute arbitrary code or cause a denial of service integer truncation and heap-based buffer overflow via a crafted packet on port 8190...

CVE-2015-2901

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine 2.22.20142.166 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to 1 the GetProperty infogetproperty function and 2 the GetProperty UdfCodeList function...

CVE-2015-2900

The AddUserFinding adduserfinding2 function in Medicomp MEDCIN Engine before 2.22.20153.226 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via a crafted packet on port 8190...

Stack overflow

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine 2.22.20142.166 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to 1 the GetProperty infogetproperty function and 2 the GetProperty UdfCodeList function...

CVE-2015-2898

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to 1 the SetGroupSequenceEx nasetgroupsequenceex function, 2 the FormatDate julptostr function, and 3 the...

Stack overflow

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to 1 the SetGroupSequenceEx nasetgroupsequenceex function, 2 the FormatDate julptostr function, and 3 the...

Out-of-bounds

The AddUserFinding adduserfinding2 function in Medicomp MEDCIN Engine before 2.22.20153.226 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via a crafted packet on port 8190...

CVE-2015-2900

The AddUserFinding adduserfinding2 function in Medicomp MEDCIN Engine before 2.22.20153.226 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via a crafted packet on port 8190...

CVE-2015-2901

CVE-2015-2901 affects Medicomp MEDCIN Engine (version 2.22.20142.166). It describes multiple stack-based buffer overflows that could allow remote code execution via a crafted packet on port 8190, specifically related to the GetProperty info_getproperty and GetProperty UdfCodeList functions. Conne...

CVE-2015-2898

CVE-2015-2898 affects Medicomp MEDCIN Engine prior to 2.22.20153.226. The vulnerability comprises multiple stack-based buffer overflows in the MEDCIN Engine that may allow remote attackers to execute arbitrary code by sending a crafted packet on port 8190. Specifically affected areas include: Set...

CVE-2015-6006

CVE-2015-6006 affects Medicomp MEDCIN Engine 2.22.20153.x prior to 2.22.20153.226. The AddUserFinding implementation may allow remote attackers to execute arbitrary code or cause a denial of service via a crafted packet on port 8190, due to integer truncation and a heap-based buffer overflow. Aff...

CVE-2015-6006

The AddUserFinding implementation in Medicomp MEDCIN Engine 2.22.20153.x before 2.22.20153.226 might allow remote attackers to execute arbitrary code or cause a denial of service integer truncation and heap-based buffer overflow via a crafted packet on port 8190...

CVE-2015-2901

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine 2.22.20142.166 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to 1 the GetProperty infogetproperty function and 2 the GetProperty UdfCodeList function...

CVE-2015-2899

Medicomp MEDCIN Engine before 2.22.20153.226 is affected by a heap-based buffer overflow in QualifierList retrieve_qualifier_list that can allow remote code execution via a long list name in a packet on port 8190. Vulnerable versions are before 2.22.20153.226. Impact includes partial confidential...

CVE-2015-2900

Medicomp MEDCIN Engine 2.22.20153.x before 2.22.20153.226 is affected by CVE-2015-2900 via the AddUserFinding add_userfinding2 function. A crafted packet sent to port 8190 can trigger an out-of-bounds write, potentially causing a denial of service and possibly other unspecified impacts. The CVE e...

CVE-2015-2898

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to 1 the SetGroupSequenceEx nasetgroupsequenceex function, 2 the FormatDate julptostr function, and 3 the...