EUVD-2015-2987

Malware in sbrugna...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Medicomp Medcin_Engine

CVE-2015-2898-2901, CVE-2015-6006 POC Exploit & Metasploit modul...

CVE-2015-6006

The AddUserFinding implementation in Medicomp MEDCIN Engine 2.22.20153.x before 2.22.20153.226 might allow remote attackers to execute arbitrary code or cause a denial of service integer truncation and heap-based buffer overflow via a crafted packet on port 8190...

Heap overflow

The AddUserFinding implementation in Medicomp MEDCIN Engine 2.22.20153.x before 2.22.20153.226 might allow remote attackers to execute arbitrary code or cause a denial of service integer truncation and heap-based buffer overflow via a crafted packet on port 8190...

CVE-2015-2901

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine 2.22.20142.166 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to 1 the GetProperty infogetproperty function and 2 the GetProperty UdfCodeList function...

CVE-2015-2900

The AddUserFinding adduserfinding2 function in Medicomp MEDCIN Engine before 2.22.20153.226 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via a crafted packet on port 8190...

Stack overflow

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine 2.22.20142.166 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to 1 the GetProperty infogetproperty function and 2 the GetProperty UdfCodeList function...

CVE-2015-2898

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to 1 the SetGroupSequenceEx nasetgroupsequenceex function, 2 the FormatDate julptostr function, and 3 the...

Stack overflow

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to 1 the SetGroupSequenceEx nasetgroupsequenceex function, 2 the FormatDate julptostr function, and 3 the...

Out-of-bounds

The AddUserFinding adduserfinding2 function in Medicomp MEDCIN Engine before 2.22.20153.226 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via a crafted packet on port 8190...

CVE-2015-2900

The AddUserFinding adduserfinding2 function in Medicomp MEDCIN Engine before 2.22.20153.226 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via a crafted packet on port 8190...

CVE-2015-2901

CVE-2015-2901 affects Medicomp MEDCIN Engine (version 2.22.20142.166). It describes multiple stack-based buffer overflows that could allow remote code execution via a crafted packet on port 8190, specifically related to the GetProperty info_getproperty and GetProperty UdfCodeList functions. Conne...

CVE-2015-6006

The AddUserFinding implementation in Medicomp MEDCIN Engine 2.22.20153.x before 2.22.20153.226 might allow remote attackers to execute arbitrary code or cause a denial of service integer truncation and heap-based buffer overflow via a crafted packet on port 8190...

CVE-2015-2901

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine 2.22.20142.166 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to 1 the GetProperty infogetproperty function and 2 the GetProperty UdfCodeList function...

CVE-2015-6006

CVE-2015-6006 affects Medicomp MEDCIN Engine 2.22.20153.x prior to 2.22.20153.226. The AddUserFinding implementation may allow remote attackers to execute arbitrary code or cause a denial of service via a crafted packet on port 8190, due to integer truncation and a heap-based buffer overflow. Aff...

CVE-2015-2898

CVE-2015-2898 affects Medicomp MEDCIN Engine prior to 2.22.20153.226. The vulnerability comprises multiple stack-based buffer overflows in the MEDCIN Engine that may allow remote attackers to execute arbitrary code by sending a crafted packet on port 8190. Specifically affected areas include: Set...

CVE-2015-2898

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to 1 the SetGroupSequenceEx nasetgroupsequenceex function, 2 the FormatDate julptostr function, and 3 the...

CVE-2015-2899

Medicomp MEDCIN Engine before 2.22.20153.226 is affected by a heap-based buffer overflow in QualifierList retrieve_qualifier_list that can allow remote code execution via a long list name in a packet on port 8190. Vulnerable versions are before 2.22.20153.226. Impact includes partial confidential...

CVE-2015-2900

Medicomp MEDCIN Engine 2.22.20153.x before 2.22.20153.226 is affected by CVE-2015-2900 via the AddUserFinding add_userfinding2 function. A crafted packet sent to port 8190 can trigger an out-of-bounds write, potentially causing a denial of service and possibly other unspecified impacts. The CVE e...

PT-2015-5962

Name of the Vulnerable Software and Affected Versions Medicomp MEDCIN Engine version 2.22.20142.166 Description The issue is related to multiple stack-based buffer overflows that could allow remote attackers to execute arbitrary code. This is possible via a crafted packet on port 8190, specifical...