CVE-2022-24062

CVE-2022-24062 affects Sante DICOM Viewer Pro 13.2.0.21165. The issue arises in JP2 file parsing where the code fails to validate the existence of an object before performing operations, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a...

CVE-2022-24062

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 13.2.0.21165. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

CVE-2022-24061

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-24061

CVE-2022-24061 affects Sante DICOM Viewer Pro (11.8.7.0). The vulnerability lies in DCM file parsing where the code fails to validate the existence of an object before operating on it, enabling an information disclosure condition. The ZDI advisory (ZDI-22-253) labels it as a Use-After-Free Inform...

CVE-2022-24060

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2022-24060

The CVE-2022-24060 entry affects Sante DICOM Viewer Pro 11.8.7.0. The vulnerability stems from the parsing of DCM files, where crafted DCM data can trigger a read past the end of an allocated buffer. This can disclose sensitive information and, in conjunction with other vulnerabilities, could ena...

CVE-2022-24059

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2022-24059

CVE-2022-24059 concerns Sante DICOM Viewer Pro 11.8.7.0. Multiple connected sources (e.g., ZDI-22-251, Red Hat, CNVD/CVEs) confirm a vulnerability in the DCM file parser: crafted DCM data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the...

CVE-2022-24058

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2022-24058

CVE-2022-24058 affects Sante DICOM Viewer Pro 11.8.7.0. The flaw lies in the parsing of J2K files, where crafted data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a m...

CVE-2022-24057

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2022-24057

Sante DICOM Viewer Pro 11.8.7.0 is affected by CVE-2022-24057 due to a flaw in J2K file parsing. Crafted J2K data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malic...

CVE-2022-24056

Summary (Mature details available): CVE-2022-24056 affects Sante DICOM Viewer Pro (e.g., 11.8.7.0). The root cause is a flaw in the J2K file parsing logic that can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitati...

CVE-2022-24056

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2022-24055

Sante DICOM Viewer Pro 11.8.7.0 is affected by CVE-2022-24055 due to a flaw in GIF file parsing. The issue arises from insufficient validation of user-supplied data, causing a read past the end of an allocated buffer and enabling information disclosure. It requires user interaction (target must v...

CVE-2022-23803

A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadXYCoord coordinate parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted gerber or excellon file can lead to code execution. An attacker can provide a malicious fil...

CVE-2022-23804

A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadIJCoord coordinate parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted gerber or excellon file can lead to code execution. An attacker can provide a malicious fil...

DEBIAN-CVE-2022-23804

A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadIJCoord coordinate parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted gerber or excellon file can lead to code execution. An attacker can provide a malicious fil...

Stack overflow

A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadIJCoord coordinate parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted gerber or excellon file can lead to code execution. An attacker can provide a malicious fil...

UBUNTU-CVE-2022-23804

A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadIJCoord coordinate parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted gerber or excellon file can lead to code execution. An attacker can provide a malicious fil...