Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-29f8-5v89-7j3x

Опубликовано: 23 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

EPSS

Процентиль: 31%
0.00118
Низкий

7.5 High

CVSS3

Дефекты

CWE-704

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 1 года назад

An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 7.5
nvd
больше 1 года назад

An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 7.5
debian
больше 1 года назад

An incorrect type conversion vulnerability exists in the DVPSSoftcopyV ...

suse-cvrf
больше 1 года назад

Security update for dcmtk

CVSS3: 7.5
fstec
больше 1 года назад

Уязвимость функции DVPSSoftcopyVOI_PList::createFromImage() библиотеки для работы с форматом DICOM DCMTK, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 31%
0.00118
Низкий

7.5 High

CVSS3

Дефекты

CWE-704