CVE-2025-3483 MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specif...

CVE-2025-3484 MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specif...

CVE-2025-3484 MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specif...

CVE-2025-3484

CVE-2025-3484 is a MedDream PACS Server vulnerability where the DICOM file parsing logic lacks proper validation of user-supplied data length, allowing stack-based buffer overflow that leads to remote code execution. The flaw enables unauthenticated, network-based exploitation with high impact on...

MedDream PACS Server 安全漏洞

MedDream PACS Server is an image archiving and communication system from MedDream, Inc. It is used to store, archive, manage and view medical images. A security vulnerability exists in MedDream PACS Server versions prior to 7.3.5.860, which stems from a stack buffer overflow issue with DICOM file...

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of DICOM files. The issue results from the lack of proper validation of...

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of DICOM files. The issue results from the lack of proper validation of...

PT-2025-15881 · Unknown · Meddream Pacs Server

Name of the Vulnerable Software and Affected Versions: MedDream PACS Server affected versions not specified Description: The issue is related to a stack-based buffer overflow in the DICOM file parsing functionality, which can lead to remote code execution. Recommendations: At the moment, there is...

Sante PACS Server Web Detection

Binary data santepacsserverwebdetect.nbin...

PT-2025-15882 · Unknown · Meddream Pacs Server

Name of the Vulnerable Software and Affected Versions: MedDream PACS Server affected versions not specified Description: The issue is related to a stack-based buffer overflow in the DICOM file parsing functionality, which can lead to remote code execution. Recommendations: At the moment, there is...

Sante PACS Server Path Traversal (CVE-2025-2264)

Binary data santepacsservercve-2025-2264.nbin...

PT-2025-15883 · Unknown · Meddream Pacs Server

Name of the Vulnerable Software and Affected Versions: MedDream PACS Server affected versions not specified Description: The issue is related to a stack-based buffer overflow in the DICOM file parsing functionality, which can lead to remote code execution. Recommendations: At the moment, there is...

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of DICOM files. The issue results from the lack of proper validation of...

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of DICOM files. The issue results from the lack of proper validation of...

PT-2025-15884 · Unknown · Meddream Pacs Server

Name of the Vulnerable Software and Affected Versions: MedDream PACS Server affected versions not specified Description: The issue is related to a stack-based buffer overflow in the DICOM file parsing functionality, which can lead to remote code execution. Recommendations: At the moment, there is...

The vulnerability of the EVP_DecryptUpdate function in the OpenSSL library of the Sante PACS Server web server allows a hacker to execute arbitrary code.

The vulnerability of the EVPDecryptUpdate function in the OpenSSL library of the Sante PACS Server web server system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending specially crafte...

Sante PACS Server EVP_DecryptUpdate Buffer Overflow Vulnerability

Sante PACS Server is a medical image management software developed for doctors to view CT in their daily consultations and improve the diagnosis rate. A buffer overflow vulnerability exists in the Sante PACS Server WEB service's EVPDecryptUpdate function that handles usernames and passwords, whic...

CVE-2025-2264

A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". An unauthenticated remote attacker can exploit it to download arbitrary files on the disk drive where the application is installed...

CVE-2025-2284

A denial-of-service vulnerability exists in the "GetWebLoginCredentials" function in "Sante PACS Server.exe"...

CVE-2025-2265

The password of a web user in "Sante PACS Server.exe" is zero-padded to 0x2000 bytes, SHA1-hashed, base64-encoded, and stored in the USER table in the SQLite database HTTP.db. However, the number of hash bytes encoded and stored is truncated if the hash contains a zero byte...