CVE-2015-2898

Multiple stack-based buffer overflows in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a crafted packet on port 8190, related to (1) the SetGroupSequenceEx na_setgroupsequenceex function, (2) the FormatDate julptostr function, and (3) the UserFindingCodes addtocl function.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

3.17% chance of exploitation in the next 30 days, 87th percentile

Published

2015-10-29

Updated

2024-08-06

Proof-of-concept exploits (1)

• securifera/CVE-2015-2900-Exploit6★ · 2016-01-06

References

• CVE Record
• NVD entry

Related

• CVE-2015-2900
• CVE-2015-6006
• CVE-2015-8277
• CVE-2016-3962
• CVE-2016-3989
• CVE-2017-18044