CVE-2024-28877

MicroDicom DICOM Viewer Stack-based Buffer Overflow

State
Published
Severity
8.7 High
Published
Jun 11, 2024
Updated
Aug 2, 2024
Reserved
May 23, 2024

Read the record on cve.org

Description

MicroDicom DICOM Viewer is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. User interaction is required to exploit this vulnerability.

Scores

CVSSScoreVectorSource
4.08.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:Nicscert
3.18.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hicscert

Weaknesses

  • CWE-121 Stack-based Buffer Overflow

Affected Products

ProductVersions
DICOM ViewerMicroDicom
  • before 2024.2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.