Arbitrary Code Execution Vulnerability in Sante DICOM Viewer Pro by Sante

CVE-2022-24058

What is CVE-2022-24058?

This vulnerability in Sante DICOM Viewer Pro 11.8.7.0 enables remote attackers to execute arbitrary code by exploiting a flaw in the handling of J2K files. To successfully carry out an attack, the user must visit a malicious web page or open a compromised J2K file. The issue stems from improper parsing, which can lead to a buffer overflow condition. By leveraging this vulnerability, attackers can execute code within the context of the affected application, potentially compromising user data and system integrity.

References