CVE-2015-8396 Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows attackers to execute arbitr...
CriticalCVSS 10.0
EPSS 16.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots DICOM (aka GDCM) before 2.6.2 allows attackers to execute arbitrary code via crafted header dimensions in a DICOM image file, which triggers a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/gdcm(Debian:12) | < 2.6.2-1 | 2.6.2-1 |
| debian/gdcm(Debian:13) | < 2.6.2-1 | 2.6.2-1 |
| debian/gdcm(Debian:14) | < 2.6.2-1 | 2.6.2-1 |
| malaterre grassroots dicom | <= 2.6.0 | No fix listed |
| malaterre grassroots dicom | = 2.6.1 | No fix listed |
References
- Debian Security Tracker CVE-2015-8396 vendor-advisory
- census-labs.com exploit
- packetstormsecurity.com
- 20160111 CVE-2015-8396: GDCM buffer overflow in ImageRegionReader::ReadIntoBuffer mailing-list
- sourceforge.net
- [gdcm-developers] 20151204 [Gdcm2] GDCM <2.6.1 two vulnerabilites exploit mailing-list
- [gdcm-developers] 20151221 Re: [Gdcm2] GDCM <2.6.1 two vulnerabilites exploit mailing-list
- 20160111 CVE-2015-8396: GDCM buffer overflow in ImageRegionReader::ReadIntoBuffer mailing-list
- 39229 exploit