CVE-2020-37120: Rubo Medical Imaging Rubo Dicom Viewer

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Rubo DICOM Viewer 2.0 contains a buffer overflow vulnerability in the DICOM server name input field that allows attackers to overwrite Structured Exception Handler (SEH). Attackers can craft a malicious text file with carefully constructed payload to execute arbitrary code by overwriting SEH and triggering remote code execution.

Affected products

• Rubo Medical Imaging Rubo Dicom Viewer: version 2.0 only

Published 2026-02-05. Last modified 2026-06-17.