PRT-10Executable in the preamble is never stored
What this test proves
CVE-2019-11687: a DICOM preamble can hold a program; the archive must never keep it.
How it is tested
- Send a CT instance whose 128-byte preamble holds a PE header (no code) by C-STORE
- Read the stored file from the private data folder
- Pass if its preamble is 128 zero bytes, DICM follows and the pixel bytes equal the input
Results
| Column | Expected | Result | Detail | Time |
|---|---|---|---|---|
| Built-in trial | Works | Pending |
Trial: needs an administrator run on a disposable test machine, because the built-in trial writes machine-wide records.
|
|
| PACS Developer | Works | Pass |
input preamble: PE header (MZ ... PE\0\0)
stored preamble zero: True
data set identical: True
|
1.4 s |
| PACS Pro | Works | Pass |
input preamble: PE header (MZ ... PE\0\0)
stored preamble zero: True
data set identical: True
|
1.4 s |
| PACS Enterprise | Works | Pass |
input preamble: PE header (MZ ... PE\0\0)
stored preamble zero: True
data set identical: True
|
1.4 s |
| Router Developer | Works | Pass |
input preamble: PE header (MZ ... PE\0\0)
stored preamble zero: True
data set identical: True
|
1.4 s |
| Router Pro | Works | Pass |
input preamble: PE header (MZ ... PE\0\0)
stored preamble zero: True
data set identical: True
|
1.4 s |
| Router Enterprise | Works | Pass |
input preamble: PE header (MZ ... PE\0\0)
stored preamble zero: True
data set identical: True
|
1.4 s |
| PACS + Viewer Developer | Works | Pass |
input preamble: PE header (MZ ... PE\0\0)
stored preamble zero: True
data set identical: True
|
1.4 s |
| PACS + Viewer Pro | Works | Pass |
input preamble: PE header (MZ ... PE\0\0)
stored preamble zero: True
data set identical: True
|
1.4 s |
| PACS + Viewer Enterprise | Works | Pass |
input preamble: PE header (MZ ... PE\0\0)
stored preamble zero: True
data set identical: True
|
1.4 s |
| PACS + Router Developer | Works | Pass |
input preamble: PE header (MZ ... PE\0\0)
stored preamble zero: True
data set identical: True
|
1.4 s |
| PACS + Router Pro | Works | Pass |
input preamble: PE header (MZ ... PE\0\0)
stored preamble zero: True
data set identical: True
|
1.4 s |
| PACS + Router Enterprise | Works | Pass |
input preamble: PE header (MZ ... PE\0\0)
stored preamble zero: True
data set identical: True
|
2.8 s |
| PACS + Router + Viewer Developer | Works | Pass |
input preamble: PE header (MZ ... PE\0\0)
stored preamble zero: True
data set identical: True
|
1.4 s |
| PACS + Router + Viewer Pro | Works | Pass |
input preamble: PE header (MZ ... PE\0\0)
stored preamble zero: True
data set identical: True
|
1.4 s |
| PACS + Router + Viewer Enterprise | Works | Pass |
input preamble: PE header (MZ ... PE\0\0)
stored preamble zero: True
data set identical: True
|
1.4 s |
| Expired license | Works | Pass |
input preamble: PE header (MZ ... PE\0\0)
stored preamble zero: True
data set identical: True
|
1.4 s |
| Revoked license | Works | Pass |
input preamble: PE header (MZ ... PE\0\0)
stored preamble zero: True
data set identical: True
|
1.4 s |
| Developer key, renewed | Works | Pass |
input preamble: PE header (MZ ... PE\0\0)
stored preamble zero: True
data set identical: True
|
1.4 s |
Test run
- Build
- PrologicSign PACS 0.1.0 ship build (bfd61b5): Release, obfuscated, strong-named
- Run
- ba7cd839-7956-4ab5-8e58-8e1444c7baf4
- Started (UTC)
- 2026-10-28 06:56:57, finished 08:49:12
This report is not complete: see why rows are pending.