Lucene search
GoogleOSV:CVE-2024-42845HistoryAug 23, 2024 - 7:15 p.m.
CVE-2024-42845
2024-08-2319:15:06
Google
osv.dev
eval injection
invesalius
dicom file
arbitrary code
software
CVSS3
8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
AI Score
7.8
Confidence
Low
An eval Injection vulnerability in the component invesalius/reader/dicom.py of InVesalius 3.1.99991 through 3.1.99998 allows attackers to execute arbitrary code via loading a crafted DICOM file.
Related
exploitdb
exploitdb
Invesalius3 - Remote Code Execution
2024-08-28 00:00:00
cvelist
cvelist
CVE-2024-42845
2024-08-23 00:00:00
cve
cve
CVE-2024-42845
2024-08-23 19:15:06
packetstorm
packetstorm
Invesalius 3.1 Remote Code Execution
2024-08-26 00:00:00
ubuntucve
ubuntucve
CVE-2024-42845
2024-08-23 00:00:00
debiancve
debiancve
CVE-2024-42845
2024-08-23 19:15:06
vulnrichment
vulnrichment
CVE-2024-42845
2024-08-23 00:00:00
githubexploit
githubexploit
Exploit for CVE-2024-42845
2024-08-23 13:43:27
nvd
nvd
CVE-2024-42845
2024-08-23 19:15:06
zdt
zdt
Invesalius 3.1 Remote Code Execution Exploit
2024-08-28 00:00:00
CVSS3
8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
AI Score
7.8
Confidence
Low
Related for OSV:CVE-2024-42845