Out-of-bounds

The JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx in Grassroots DICOM aka GDCM before 2.6.2 allows remote attackers to obtain sensitive information from process memory or cause a denial of service application crash via an embedded JPEG-LS image with dimension...

Integer overflow

Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots DICOM aka GDCM before 2.6.2 allows attackers to execute arbitrary code via crafted header dimensions in a DICOM image file, which triggers a buffer overflow...

CVE-2015-8396

Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots DICOM aka GDCM before 2.6.2 allows attackers to execute arbitrary code via crafted header dimensions in a DICOM image file, which triggers a buffer overflow...

CVE-2015-8396

Grassroots DICOM (GDCM) versions 2.6.0 and 2.6.1 (and possibly earlier) contain an integer overflow in ImageRegionReader::ReadIntoBuffer, allowing a crafted DICOM header to trigger a buffer overflow and potentially remote code execution. The vulnerability is triggered during copying of image data...

CVE-2015-8397

The JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx in Grassroots DICOM aka GDCM before 2.6.2 allows remote attackers to obtain sensitive information from process memory or cause a denial of service application crash via an embedded JPEG-LS image with dimension...

CVE-2015-8397

Grassroots DICOM (GDCM) up to v2.6.1 is affected by CVE-2015-8397 due to a vulnerability in JPEGLSCodec.DecodeExtent. An embedded JPEG-LS image with dimensions larger than the selected region in a 2D or 3D DICOM file can trigger an out-of-bounds read, potentially exposing sensitive process memory...

CVE-2015-8397

The JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx in Grassroots DICOM aka GDCM before 2.6.2 allows remote attackers to obtain sensitive information from process memory or cause a denial of service application crash via an embedded JPEG-LS image with dimension...

Grassroots DICOM (GDCM) 2.6.0 and 2.6.1 - ImageRegionReader::ReadIntoBuffer Buffer Overflow

Exploit for linux platform in category dos / poc / Grassroots DICOM GDCM is a C++ library for processing DICOM medical images. It provides routines to view and manipulate a wide range of image formats and can be accessed through many popular programming languages like Python, C, Java and PHP. GDC...

Grassroots DICOM (GDCM) 2.6.0 and 2.6.1 - ImageRegionReader::ReadIntoBuffer Buffer Overflow

/ Grassroots DICOM GDCM is a C++ library for processing DICOM medical images. It provides routines to view and manipulate a wide range of image formats and can be accessed through many popular programming languages like Python, C, Java and PHP. GDCM versions 2.6.0 and 2.6.1 and possibly previous...

gdcm -- multiple vulnerabilities

CENSUS S.A. reports: GDCM versions 2.6.0 and 2.6.1 and possibly previous versions are prone to an integer overflow vulnerability which leads to a buffer overflow and potentially to remote code execution. GDCM versions 2.6.0 and 2.6.1 and possibly previous versions are prone to an out-of-bounds re...

MDVA-2010:158 : gdcm

This updates gdcm to version 20.0.14 and corrects some packaging issues that rendered the python interface non functional. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

Mandriva Update for gdcm MDVA-2010:158 (gdcm)

Check for the Version of gdcm OpenVAS Vulnerability Test Mandriva Update for gdcm MDVA-2010:158 gdcm Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Mandriva Update for gdcm MDVA-2010:158 (gdcm)

Check for the Version of gdcm OpenVAS Vulnerability Test Mandriva Update for gdcm MDVA-2010:158 gdcm Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...