EUVD-2015-2987

Malware in sbrugna...

CVE-2015-6006

The AddUserFinding implementation in Medicomp MEDCIN Engine 2.22.20153.x before 2.22.20153.226 might allow remote attackers to execute arbitrary code or cause a denial of service integer truncation and heap-based buffer overflow via a crafted packet on port 8190...

Heap overflow

The AddUserFinding implementation in Medicomp MEDCIN Engine 2.22.20153.x before 2.22.20153.226 might allow remote attackers to execute arbitrary code or cause a denial of service integer truncation and heap-based buffer overflow via a crafted packet on port 8190...

CVE-2015-2901

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine 2.22.20142.166 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to 1 the GetProperty infogetproperty function and 2 the GetProperty UdfCodeList function...

CVE-2015-2900

The AddUserFinding adduserfinding2 function in Medicomp MEDCIN Engine before 2.22.20153.226 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via a crafted packet on port 8190...

Stack overflow

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to 1 the SetGroupSequenceEx nasetgroupsequenceex function, 2 the FormatDate julptostr function, and 3 the...

Stack overflow

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine 2.22.20142.166 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to 1 the GetProperty infogetproperty function and 2 the GetProperty UdfCodeList function...

CVE-2015-2898

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to 1 the SetGroupSequenceEx nasetgroupsequenceex function, 2 the FormatDate julptostr function, and 3 the...

Out-of-bounds

The AddUserFinding adduserfinding2 function in Medicomp MEDCIN Engine before 2.22.20153.226 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via a crafted packet on port 8190...

CVE-2015-2900

The AddUserFinding adduserfinding2 function in Medicomp MEDCIN Engine before 2.22.20153.226 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via a crafted packet on port 8190...

CVE-2015-2900

Medicomp MEDCIN Engine 2.22.20153.x before 2.22.20153.226 is affected by CVE-2015-2900 via the AddUserFinding add_userfinding2 function. A crafted packet sent to port 8190 can trigger an out-of-bounds write, potentially causing a denial of service and possibly other unspecified impacts. The CVE e...

CVE-2015-6006

The AddUserFinding implementation in Medicomp MEDCIN Engine 2.22.20153.x before 2.22.20153.226 might allow remote attackers to execute arbitrary code or cause a denial of service integer truncation and heap-based buffer overflow via a crafted packet on port 8190...

CVE-2015-2898

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to 1 the SetGroupSequenceEx nasetgroupsequenceex function, 2 the FormatDate julptostr function, and 3 the...

CVE-2015-2898

CVE-2015-2898 affects Medicomp MEDCIN Engine prior to 2.22.20153.226. The vulnerability comprises multiple stack-based buffer overflows in the MEDCIN Engine that may allow remote attackers to execute arbitrary code by sending a crafted packet on port 8190. Specifically affected areas include: Set...

CVE-2015-2901

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine 2.22.20142.166 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to 1 the GetProperty infogetproperty function and 2 the GetProperty UdfCodeList function...

CVE-2015-6006

CVE-2015-6006 affects Medicomp MEDCIN Engine 2.22.20153.x prior to 2.22.20153.226. The AddUserFinding implementation may allow remote attackers to execute arbitrary code or cause a denial of service via a crafted packet on port 8190, due to integer truncation and a heap-based buffer overflow. Aff...

CVE-2015-2901

CVE-2015-2901 affects Medicomp MEDCIN Engine (version 2.22.20142.166). It describes multiple stack-based buffer overflows that could allow remote code execution via a crafted packet on port 8190, specifically related to the GetProperty info_getproperty and GetProperty UdfCodeList functions. Conne...

CVE-2015-2899

Medicomp MEDCIN Engine before 2.22.20153.226 is affected by a heap-based buffer overflow in QualifierList retrieve_qualifier_list that can allow remote code execution via a long list name in a packet on port 8190. Vulnerable versions are before 2.22.20153.226. Impact includes partial confidential...

Medicomp Systems MEDCIN Engine Integer Overflow Vulnerability

Medicomp Systems MEDCIN Engine is an electronic medical record system from French company Medicomp Systems. The system provides content and tools for physician and nurse documentation, clinical decision support and patient management. An integer overflow vulnerability exists in Medicomp Systems...

Medicomp Systems MEDCIN Engine Denial of Service Vulnerability

Medicomp Systems MEDCIN Engine is an electronic medical record system from French company Medicomp Systems. The system provides content and tools for physician and nurse documentation, clinical decision support and patient management. A security vulnerability exists in the 'AddUserFinding...