Products
Merge DICOM Toolkit C/C++
Source
prodsec@nozominetworks.com
Tags
CVE-2024-23914 details
Published : May 3, 2024, 9:15 a.m.
Last Modified : May 3, 2024, 12:48 p.m.
Last Modified : May 3, 2024, 12:48 p.m.
Description
Use of Externally-Controlled Format String vulnerability in Merge DICOM Toolkit C/C++ on Windows. When MC_Open_Association() function is used to open DICOM Association and gets DICOM Application Context Name with illegal characters, it might result in an unhandled exception.
CVSS Score
| 1 | 2 | 3 | 4 | 5.7 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|
CVSS Data
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Base Score
5.7
Exploitability Score
Impact Score
Base Severity
MEDIUM
Vector String : CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References
| URL | Source |
|---|---|
| https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23914 | prodsec@nozominetworks.com |
This website uses the NVD API, but is not approved or certified by it.