Heap-based Buffer Overflow

imagemagick is vulnerable to heap-based buffer overflow. The vulnerability exists in ImageMagick's RelinquishDCMInfo function of dcm.c which allows an attacker to pass a specially crafted DICOM image file for conversion causing an information disclosure and an application crash...

openSUSE 15 Security Update : gdcm, orthanc, orthanc-gdcm, orthanc-webviewer (openSUSE-SU-2022:10144-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10144-1 advisory. - OFFIS DCMTK's All versions prior to 3.6.7 service class provider SCP is vulnerable to path traversal, allowing an attacker to write DICO...

OPENSUSE-SU-2022:10144-1 Security update for gdcm, orthanc, orthanc-gdcm, orthanc-webviewer

This update for gdcm, orthanc, orthanc-gdcm, orthanc-webviewer fixes the following issues: Changes in gdcm: - Provides/obsoletes moved to lbgdcm-package Thx DimStar - rename of gdcm-libgdcm30 to libgdcm30 proposal S. Br�ns - version 3.0.18 no changelog - version 3.0.12 support for poppler 22.03...

Canon Medical Vitrea View Cross-Site Scripting Vulnerability

Canon Medical Vitrea View is a DICOM network-enabled enterprise viewing solution from Canon, Japan. A cross-site scripting vulnerability exists in Canon Medical Vitrea View, which is used to visually display DICOM and multimedia images. An attacker could use this vulnerability to execute arbitrar...

Canon Medical Vitrea View 跨站脚本漏洞

Canon Medical Vitrea View is a DICOM network-enabled enterprise viewing solution from Canon, Japan. A cross-site scripting vulnerability exists in Canon Medical Vitrea View, which is used to visually display DICOM and multimedia images. An attacker could use this vulnerability to execute arbitrar...

PT-2022-5235 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 11.1.3 and earlier Adobe Bridge versions 12.0.2 and earlier Description: The issue is related to a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this...

Path Traversal

dcmtk is vulnerable to path traversal, A remote attacker is able to write DICOM files into arbitrary directories under controlled names...

Remote Code Execution

dcmtk is vulnerable to remote code execution. Service class users are vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names resulting in remote code execution...

Denial Of Service (DoS)

OFFIS DCMTK's All versions prior to 3.6.7 has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition...

Fedora: Security Advisory for dcmtk (FEDORA-2022-eaeeb0ca2b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for dcmtk (FEDORA-2022-d9f1bb102d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: dcmtk-3.6.7-1.fc36

DCMTK is a collection of libraries and applications implementing large parts the DICOM standard. It includes software for examining, constructing and converting DICOM image files, handling offline media, sending and receiving images over a network connection, as well as demonstrative image storag...

[SECURITY] Fedora 35 Update: dcmtk-3.6.7-1.fc35

DCMTK is a collection of libraries and applications implementing large parts the DICOM standard. It includes software for examining, constructing and converting DICOM image files, handling offline media, sending and receiving images over a network connection, as well as demonstrative image storag...

CVE-2022-28668

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.9.2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-28668

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.9.2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-28668

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.9.2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.9.2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-28668

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.9.2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-28668

The CVE-2022-28668 issue affects Sante DICOM Viewer Pro 11.9.2. It stems from improper validation in the J2K file parsing code, causing a write past the end of an allocated data structure and enabling remote code execution with user interaction (visiting a malicious page or opening a malicious fi...

Santesoft Sante DICOM Viewer Pro 缓冲区错误漏洞

Santesoft Sante DICOM Viewer Pro is a powerful viewer, anonymizer, converter and PACS client from Santesoft Cyprus. Suitable for all models and manufacturers of DICOM files. A buffer error vulnerability exists in Santesoft Sante DICOM Viewer Pro prior to version 11.9.3, which stems from a lack of...