Lucene search

NozomiCVELIST:CVE-2024-23913

HistoryMay 03, 2024 - 8:15 a.m.

CVE-2024-23913

2024-05-0308:15:19

Nozomi

www.cve.org

merge dicom toolkit

out-of-range pointer offset

c/c++

windows

mc_xml_to_message

malformed dicom xml

memory access violation

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

4.6

Confidence

High

EPSS

Percentile

9.0%

JSON

Use of Out-of-range Pointer Offset vulnerability in Merge DICOM Toolkit C/C++ on Windows.

When deprecated MC_XML_To_Message() function is used to read a malformed DICOM XML file, it might result in memory access violation.

CNA Affected

[
  {
    "collectionURL": "https://www.merative.com/merge-imaging/dicom-toolkit",
    "defaultStatus": "unaffected",
    "packageName": "Merge DICOM Toolkit C/C++ 64-bit Microsoft Windows",
    "platforms": [
      "Windows"
    ],
    "product": "Merge DICOM Toolkit C/C++",
    "programRoutines": [
      {
        "name": "MC_XML_To_Message"
      }
    ],
    "vendor": "Merative",
    "versions": [
      {
        "lessThanOrEqual": "v5.17.0",
        "status": "affected",
        "version": "v5.0.0",
        "versionType": "semver"
      }
    ]
  }
]

References

www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23913

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

4.6

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVELIST:CVE-2024-23913