CVE-2020-37120CWE-121

Rubo DICOM Viewer 2.0 - Buffer Overflow (SEH)

High · published February 5, 2026

CVSS v4.0
8.4
EPSS
1%
Percentile
43.7
In the wild
Unconfirmed
What it is

⚡ A crafty buffer overflow lurks in Rubo DICOM Viewer 2.0! Attackers can exploit a vulnerability in the DICOM server name input field to run arbitrary code — a recipe for disaster! 🔥 Think of it like a delivery driver who misreads the address on a package. Instead of dropping it off at the right house, they wind up at a random location, handing over sensitive information where it doesn’t belong. An attacker could overwrite critical memory structures and execute malicious code remotely, potentially leading to a complete system compromise. This means they could gain unauthorized access to sensitive data, disrupt operations, or even take control of the entire application!

Put simply

Think of it like a delivery driver who misreads the address on a package. Instead of dropping it off at the right house, they wind up at a random location, handing over sensitive information where it doesn’t belong. This vulnerability allows attackers to manipulate the server name input field, leading to a buffer overflow that overwrites the Structured Exception Handler (SEH). This opens the door for attackers to execute their own arbitrary code on the system.

What to do

An attacker could overwrite critical memory structures and execute malicious code remotely, potentially leading to a complete system compromise. This means they could gain unauthorized access to sensitive data, disrupt operations, or even take control of the entire application! Update Rubo DICOM Viewer to the latest version immediately to patch this vulnerability. Ensure proper input validation to prevent buffer overflow situations in the future. Regularly audit your application for security vulnerabilities to stay ahead! You've got this! Follow these steps, and you'll be one step closer to superhero status in securing your systems! 🛡️

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00526 · 43.7th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-02-05T16:13Z
EPSS history
Timeline
  • 05 FEB 16:13Z
    Rubo DICOM Viewer 2.0 - Buffer Overflow (SEH)
    cvelistv5