Remote Code Execution Vulnerability in Sante DICOM Viewer Pro 11.8.7.0

CVE-2022-24057

What is CVE-2022-24057?

This vulnerability permits remote attackers to execute arbitrary code in Sante DICOM Viewer Pro 11.8.7.0. The issue stems from the software's handling of J2K files, where maliciously crafted data can result in a write operation that exceeds the buffer's allocated size. To exploit this, the victim must either visit an infected webpage or open a malicious file, making user interaction a requirement for the attack. Successful exploitation can lead to arbitrary code execution within the context of the running process. More details can be found in the advisory published by the Zero Day Initiative.

References