Skip to content
OpenAdvisories
High ICSMA-24-060-01 2 CVEs

MicroDicom DICOM Viewer

Published Feb 29, 2024 · Updated Feb 29, 2024

Vendor: MicroDicom Product: DICOM Viewer

Summary

Successful exploitation of these vulnerabilities could allow an attacker to cause memory corruption issues leading to execution of arbitrary code.

Vulnerabilities 2

  • High 7.8
    CVE-2024-22100

    MicroDicom DICOM Heap-based Buffer Overflow

    MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior are affected by a heap-based buffer overflow vulnerability, which could allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. A user must open a malicious DCM file…

    MicroDicom DICOM Viewer
  • High 7.8
    CVE-2024-25578

    MicroDicom DICOM Viewer Out-of-Bounds Write

    MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior contain a lack of proper validation of user-supplied data, which could result in memory corruption within the application.

    MicroDicom DICOM Viewer

Revision history

  1. #1

    Initial Publication

References