CVE-2015-2899 Heap-based buffer overflow in the QualifierList retrieve_qualifier_list function in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a long list....
MediumCVSS 6.8
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the QualifierList retrieve_qualifier_list function in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a long list name in a packet on port 8190.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| medicomp medcin engine | <= 2.22.20142.166 | No fix listed |
References
- VU#675052 third-party-advisory us-government-resource
- www.securifera.com