Gjoko Krstic of Zero Science Labs discovered that dcmtk, a collection
of libraries implementing the DICOM standard, did not properly handle
the size of data received from the network. This could lead to
denial-of-service (via application crash) or arbitrary code execution.