CVE:CVE-2013-2808
CNNVD:CNNVD-201310-020
Philips Xper Information Management Physiomonitoring等都是荷兰飞利浦（Philips）公司的医疗保健信息系统（Xper心血管工作流程解决方案）中的组件。该解决方案提供流程表、登记管理、实时血流动力学监测及报告等功能。
Philips Xper应用程序中存在基于堆的缓冲区溢出漏洞。远程攻击者可通过发送特制的HTTP请求到TCP端口6000利用该漏洞执行任意代码，影响系统的完整性，保密性及可用性。使用XperConnect代理的以下产品受到影响：Xper Information Management Physiomonitoring 5系统组件，Xper Information Management Vascular Monitoring 5系统组件，Flex Cardio产品的Xper Information Management服务器和工作站，XperConnect 1.5.4.053及之前的版本。
solution:Upgrade philips xper_information_management_physiomonitoring_5 to a higher version than -; Upgrade philips xperconnect to a higher version than 1.5.4.053,and avoid the version (,1.5.4.053]; Upgrade philips xper_information_management_vascular_monitoring_5 to a higher version than -; Upgrade philips xper_flex_cardio to a higher version than -