CVE-2022-24057

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2022-24057

Sante DICOM Viewer Pro 11.8.7.0 is affected by CVE-2022-24057 due to a flaw in J2K file parsing. Crafted J2K data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malic...

CVE-2022-24056

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2022-24056

Summary (Mature details available): CVE-2022-24056 affects Sante DICOM Viewer Pro (e.g., 11.8.7.0). The root cause is a flaw in the J2K file parsing logic that can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitati...

CVE-2021-46626

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-46626

Bentley View 10.15.0.75 is affected. The vulnerability stems from J2K image parsing, causing a read past the end of an allocated buffer and enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). No explicit remediation/versi...

CVE-2021-46622

Bentley MicroStation CONNECT vulnerable to out-of-bounds read when parsing J2K files (CJ2K image parsing) in version 10.16.0.80. The flaw allows remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or opening a malicious fi...

CVE-2021-46622

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46614

Bentley MicroStation CONNECT 10.16.0.80 J2K File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerabili...

CVE-2021-46614

CVE-2021-46614 concerns Bentley MicroStation CONNECT 10.16.0.80, where the vulnerability arises in the parsing of J2K images. The underlying flaw is an out-of-bounds read that can be triggered by crafted J2K data, allowing an attacker to execute arbitrary code in the context of the affected proce...

CVE-2021-46603

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46603 due to a heap-based buffer overflow in the J2K image parser. The vulnerability arises from inadequate validation of the length of user-supplied data before copying it into a heap buffer, allowing remote attackers to execute arb...

CVE-2021-46584

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46584

CVE-2021-46584 affects Bentley MicroStation CONNECT 10.16.0.80. The flaw is in the parsing of J2K images, where crafted data can trigger a write past the end of an allocated buffer, allowing an attacker to execute code in the context of the current process. User interaction is required (visiting ...

CVE-2021-46583

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46583

CVE-2021-46583 affects Bentley MicroStation CONNECT 10.16.0.80. The root cause is an out-of-bounds write in the J2K image parser, triggered by crafted J2K data. This can allow a remote attacker to execute arbitrary code in the context of the affected process, with user interaction required (visit...

Sante DICOM Viewer Pro J2K Remote Code Execution Vulnerability (CNVD-2022-14983)

Sante DICOM Viewer Pro is a medical DICOM image viewer.A remote code execution vulnerability exists in Sante DICOM Viewer Pro J2K, which can be exploited by attackers to execute code in the context of the current process...

Sante DICOM Viewer Pro J2K Remote Code Execution Vulnerability

Sante DICOM Viewer Pro is a medical DICOM image viewer.A remote code execution vulnerability exists in Sante DICOM Viewer Pro J2K, which can be exploited by attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro...

Sante DICOM Viewer Pro J2K Remote Code Execution Vulnerability (CNVD-2022-14984)

Sante DICOM Viewer Pro is a medical DICOM image viewer.A remote code execution vulnerability exists in Sante DICOM Viewer Pro J2K, which can be exploited by attackers to execute code in the context of the current process...

Sante DICOM Viewer Pro J2K File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

Sante DICOM Viewer Pro J2K File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...