Sensitive Information Disclosure in Sante DICOM Viewer Pro by Provider

CVE-2022-24055

What is CVE-2022-24055?

The vulnerability allows remote attackers to disclose sensitive information in Sante DICOM Viewer Pro 11.8.7.0 by exploiting improper validation of user-supplied data when processing GIF files. This flaw necessitates user interaction, as the target must visit a malicious page or open an affected file. The critical issue arises from reading past the end of an allocated buffer, potentially enabling an attacker to execute arbitrary code within the current process context, particularly when combined with other vulnerabilities.

References