MicroDicom DICOM Viewer
view advisory published 2024-02-29
Successful exploitation of these vulnerabilities could allow an attacker to cause memory corruption issues leading to execution of arbitrary code.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-25578US | high7.8 | — | ||
MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior contain a lack of proper validation of user-supplied data, which could result in memory corruption within the appl… | ||||
| CVE-2024-22100US | high7.8 | — | ||
MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior are affected by a heap-based buffer overflow vulnerability, which could allow an attacker to execute arbitrary c… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSMA-24-060-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSMA-24-060-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationMicroDicom DICOM Viewer
MicroDicom has provided a fix and recommends users upgrade to 2024.1.
https://www.microdicom.com/ - MitigationMicroDicom DICOM Viewer
MicroDicom has provided a fix and recommends users upgrade to 2024.1.
https://www.microdicom.com/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan