CVE-2024-22100

2024-03-0101:15:07

CWE-122

[email protected]

web.nvd.nist.gov

microdicom dicom viewer

cve-2024-22100

buffer overflow

vulnerability

security

dcm file

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

8.9%

JSON

MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior are affected by a heap-based buffer overflow vulnerability, which could allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. A user must open a malicious DCM file in order to exploit the vulnerability.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "DICOM Viewer",
    "vendor": "MicroDicom",
    "versions": [
      {
        "lessThanOrEqual": " 2023.3 (Build 9342)",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]