MicroDicom DICOM Viewer
Advisory ansehen veröffentlicht 2024-02-29
Successful exploitation of these vulnerabilities could allow an attacker to cause memory corruption issues leading to execution of arbitrary code.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-25578US | high7.8 | — | ||
MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior contain a lack of proper validation of user-supplied data, which could result in memory corruption within the appl… | ||||
| CVE-2024-22100US | high7.8 | — | ||
MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior are affected by a heap-based buffer overflow vulnerability, which could allow an attacker to execute arbitrary c… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSMA-24-060-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSMA-24-060-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationMicroDicom DICOM Viewer
MicroDicom has provided a fix and recommends users upgrade to 2024.1.
https://www.microdicom.com/ - MitigationMicroDicom DICOM Viewer
MicroDicom has provided a fix and recommends users upgrade to 2024.1.
https://www.microdicom.com/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan