CVE-2024-33606 MicroDicom DICOM Viewer Improper Authorization in Handler for Custom URL Scheme

An attacker could retrieve sensitive files medical images as well as plant new medical images or overwrite existing medical images on a MicroDicom DICOM Viewer system. User interaction is required to exploit this vulnerability...

CVE-2024-33606

CVE-2024-33606 affects MicroDicom DICOM Viewer prior to version 2024.2. The issue is Improper Authorization in the Handler for the Custom URL Scheme, enabling an attacker to retrieve sensitive medical images and to plant or overwrite images on the victim’s system. Exploitation requires user inter...

CVE-2024-28877 MicroDicom DICOM Viewer Stack-based Buffer Overflow

MicroDicom DICOM Viewer is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. User interaction is required to exploit this vulnerability...

CVE-2024-28877 MicroDicom DICOM Viewer Stack-based Buffer Overflow

MicroDicom DICOM Viewer is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. User interaction is required to exploit this vulnerability...

CVE-2024-28877

CVE-2024-28877 affects MicroDicom DICOM Viewer, which is vulnerable to a stack-based buffer overflow in the DICOM Viewer component. The underlying issue could allow arbitrary code execution on affected installations, with user interaction required to exploit. The ICS/CISA advisory and related sou...

CISA Releases Six Industrial Control Systems Advisories

CISA released six Industrial Control Systems ICS advisories on June 11, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-163-01 Rockwell Automation ControlLogix, GuardLogix, and CompactLogix ICSA-24-163-02 AVEV...

PT-2024-22621 · Unknown · Microdicom Dicom Viewer

Name of the Vulnerable Software and Affected Versions: MicroDicom DICOM Viewer affected versions not specified Description: The issue is related to a stack-based buffer overflow that could allow an attacker to execute arbitrary code on affected installations. User interaction is required for...

MicroDicom DICOM Viewer Security Vulnerability

MicroDicom DICOM Viewer is a lightweight and easy-to-use application from MicroDicom Inc. for processing and viewing medical images in DICOM format. A security vulnerability exists in versions of MicroDicom DICOM Viewer prior to 2024.2 that stems from the presence of a stack-based buffer overflow...

PT-2024-25372 · Unknown · Microdicom Dicom Viewer

Name of the Vulnerable Software and Affected Versions: MicroDicom DICOM Viewer affected versions not specified Description: The issue allows an attacker to retrieve sensitive files, such as medical images, and also enables them to add new medical images or overwrite existing ones on the system...

MicroDicom DICOM Viewer Security Vulnerability

MicroDicom DICOM Viewer is a lightweight and easy-to-use application from MicroDicom Inc. for processing and viewing medical images in DICOM format. A security vulnerability exists in versions of MicroDicom DICOM Viewer prior to 2024.2, which stems from the ability of an attacker to retrieve...

CVE-2024-25578

MicroDicom DICOM Viewer versions 2023.3 Build 9342 and prior contain a lack of proper validation of user-supplied data, which could result in memory corruption within the application...

CVE-2024-22100

MicroDicom DICOM Viewer versions 2023.3 Build 9342 and prior are affected by a heap-based buffer overflow vulnerability, which could allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. A user must open a malicious DCM file in order to exploit the vulnerability...

CVE-2024-22100

MicroDicom DICOM Viewer versions 2023.3 Build 9342 and prior are affected by a heap-based buffer overflow vulnerability, which could allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. A user must open a malicious DCM file in order to exploit the vulnerability...

CVE-2024-25578

MicroDicom DICOM Viewer versions 2023.3 Build 9342 and prior contain a lack of proper validation of user-supplied data, which could result in memory corruption within the application...

Heap overflow

MicroDicom DICOM Viewer versions 2023.3 Build 9342 and prior are affected by a heap-based buffer overflow vulnerability, which could allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. A user must open a malicious DCM file in order to exploit the vulnerability...

Memory corruption

MicroDicom DICOM Viewer versions 2023.3 Build 9342 and prior contain a lack of proper validation of user-supplied data, which could result in memory corruption within the application...

CVE-2024-25578 MicroDicom DICOM Viewer Out-of-Bounds Write

MicroDicom DICOM Viewer versions 2023.3 Build 9342 and prior contain a lack of proper validation of user-supplied data, which could result in memory corruption within the application...

CVE-2024-25578 MicroDicom DICOM Viewer Out-of-Bounds Write

MicroDicom DICOM Viewer versions 2023.3 Build 9342 and prior contain a lack of proper validation of user-supplied data, which could result in memory corruption within the application...

CVE-2024-25578

CVE-2024-25578 affects MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and earlier, due to a lack of proper validation of user-supplied data that could lead to memory corruption. The ICS/CISA advisory lists an Out-of-Bounds Write vulnerability (CWE-787) with a CVSS v3.1 base score of 7.8 (lo...

CVE-2024-22100 MicroDicom DICOM Heap-based Buffer Overflow

MicroDicom DICOM Viewer versions 2023.3 Build 9342 and prior are affected by a heap-based buffer overflow vulnerability, which could allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. A user must open a malicious DCM file in order to exploit the vulnerability...