CVE-2015-8396

Grassroots DICOM (GDCM) 2.6.0 and 2.6.1 - ImageRegionReader::ReadIntoBuffer Buffer Overflow

Severity Score

10.0

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows attackers to execute arbitrary code via crafted header dimensions in a DICOM image file, which triggers a buffer overflow.

Desbordamiento de entero en la función ImageRegionReader::ReadIntoBuffer en MediaStorageAndFileFormat/gdcmImageRegionReader.cxx en Grassroots DICOM (también conocido como GDCM) en versiones anteriores a 2.6.2 permite a atacantes ejecutar código arbitrario a través de dimensiones de cabecera manipuladas en un archivo de imagen DICOM, lo que desencadena un desbordamiento de buffer.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2015-12-02 CVE Reserved
2016-01-11 CVE Published
2024-08-06 CVE Updated
2024-08-06 First Exploit
2024-09-18 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-189: Numeric Errors

CAPEC

References (8)

URL	Tag	Source
http://packetstormsecurity.com/files/135205/GDCM-2.6.0-2.6.1-Integer-Overflow.html	X_refsource_misc
http://seclists.org/fulldisclosure/2016/Jan/29	Mailing List
http://sourceforge.net/p/gdcm/gdcm/ci/e547b1ded3fd21e0b0ad149f13045aa12d4b9b7c	X_refsource_confirm
http://www.securityfocus.com/archive/1/537264/100/0/threaded	Mailing List

URL	Date	SRC
https://www.exploit-db.com/exploits/39229	2024-08-06
http://census-labs.com/news/2016/01/11/gdcm-buffer-overflow-imageregionreaderreadintobuffer	2024-08-06
http://sourceforge.net/p/gdcm/mailman/message/34670701	2024-08-06
http://sourceforge.net/p/gdcm/mailman/message/34687533	2024-08-06

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Grassroots Dicom Project Search vendor "Grassroots Dicom Project"		Grassroots Dicom Search vendor "Grassroots Dicom Project" for product "Grassroots Dicom"				<= 2.6.0 Search vendor "Grassroots Dicom Project" for product "Grassroots Dicom" and version " <= 2.6.0"		-		Affected
Grassroots Dicom Project Search vendor "Grassroots Dicom Project"		Grassroots Dicom Search vendor "Grassroots Dicom Project" for product "Grassroots Dicom"				2.6.1 Search vendor "Grassroots Dicom Project" for product "Grassroots Dicom" and version "2.6.1"		-		Affected