PT-2019-17466

CVE-2019-5085

·

Publicado

2019-12-11

·

Atualizado

2022-06-17

Descrição por

CVSS 3.1
9.8
Crítica
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions LEADTOOLS libltdic.so version 20.0.2019.3.15
Description A code execution issue exists in the DICOM packet-parsing functionality. It can be triggered by a specially crafted packet, causing an integer overflow that results in heap corruption.
Recommendations For version 20.0.2019.3.15, consider restricting access to the DICOM packet-parsing functionality until a patch is available. As a temporary workaround, avoid processing untrusted or unknown DICOM packets to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾