Remote Code Execution Vulnerability in Sante DICOM Viewer Pro by Sante Software

CVE-2022-24063

What is CVE-2022-24063?

This vulnerability permits remote attackers to execute arbitrary code on installations of Sante DICOM Viewer Pro 13.2.0.21165. Exploitation necessitates user interaction, such as visiting a malicious webpage or opening a harmful file. The specific flaw arises during the parsing of JP2 files due to inadequate validation of user-supplied data, leading to memory corruption. An attacker could utilize this weakness to execute code in the current process context, thereby compromising the affected system.

References