Remote Code Execution Vulnerability in Sante DICOM Viewer Pro by Sante Healthcare

CVE-2022-24056

What is CVE-2022-24056?

A vulnerability has been identified in Sante DICOM Viewer Pro, allowing remote attackers to execute arbitrary code on affected systems. This issue arises from improper parsing of J2K files, where crafted data can lead to a buffer overflow. Exploitation requires user interaction, as the target must access a malicious webpage or open a specially crafted file. Successful exploitation enables an attacker to execute code within the context of the affected application, highlighting significant security risks.

References