nvd-json-data-feeds/CVE-2024/CVE-2024-276xx/CVE-2024-27629.json

{
  "id": "CVE-2024-27629",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2024-06-28T19:15:05.243",
  "lastModified": "2024-07-01T12:37:24.220",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue in dc2niix before v.1.0.20240202 allows a local attacker to execute arbitrary code via the generated file name is not properly escaped and injected into a system call when certain types of compression are used."
    },
    {
      "lang": "es",
      "value": "Un problema en dc2niix anterior a v.1.0.20240202 permite a un atacante local ejecutar c\u00f3digo arbitrario a trav\u00e9s del nombre del archivo generado que no se escapa correctamente ni se inyecta en una llamada al sistema cuando se utilizan ciertos tipos de compresi\u00f3n."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://github.com/rordenlab/dcm2niix/pull/789",
      "source": "cve@mitre.org"
    }
  ]
}