Description
Rubo DICOM Viewer 2.0 contains a buffer overflow vulnerability in the DICOM server name input field that allows attackers to overwrite Structured Exception Handler (SEH). Attackers can craft a malicious text file with carefully constructed payload to execute arbitrary code by overwriting SEH and triggering remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rubo Medical Imaging | Rubo DICOM Viewer | 2.0 | — |
References
- ExploitDB-48351 exploit
- Archived Rubo DICOM Viewer Product Page product
- VulnCheck Advisory: Rubo DICOM Viewer 2.0 - Buffer Overflow (SEH) third-party-advisory