Orthanc DICOM Server Heap Buffer Overflow Vulnerability in Palette Color Image Decoding

A heap buffer overflow vulnerability has been identified in Orthanc DICOM Server versions through 1.12.10. This vulnerability occurs during the decoding of 'PALETTE COLOR' DICOM images, where pixel length validation improperly uses 32-bit multiplication for width and height calculations. This can lead to integer overflow, allowing the decoder to read and write beyond allocated memory buffers.

Impact

Exploitation of this vulnerability causes heap memory corruption, with the potential to crash the Orthanc process. Under certain conditions, this memory corruption could be leveraged to execute arbitrary code remotely.

Remediation

Users are advised to upgrade to Orthanc version 1.12.11. Consult the Orthanc documentation and release notes for guidance on patching and deployment.