60
CVE-2020-6152
PoC —CVSS 3.1
7.8 high
EPSS
2%p79
Published
()
Modified
Description
A code execution vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause an out-of-bounds write. An attacker can trigger this vulnerability by providing a victim with a malicious DICOM file.
- Vendors
- accusoft
- Products
- imagegear
- Weakness
- CWE-252, CWE-787
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H