Remote Code Execution Vulnerability in Sante DICOM Viewer Pro by Sante Software
CVE-2022-24063

7.8HIGH

Key Information:

Vendor

Sante

Status
Dicom Viewer Pro
Vendor
CVE Published:
18 February 2022

What is CVE-2022-24063?

This vulnerability permits remote attackers to execute arbitrary code on installations of Sante DICOM Viewer Pro 13.2.0.21165. Exploitation necessitates user interaction, such as visiting a malicious webpage or opening a harmful file. The specific flaw arises during the parsing of JP2 files due to inadequate validation of user-supplied data, leading to memory corruption. An attacker could utilize this weakness to execute code in the current process context, thereby compromising the affected system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

DICOM Viewer Pro 13.2.0.21165

References

https://www.zerodayinitiative.com/advisories/ZDI-22-255/
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mat Powell of Trend Micro Zero Day Initiative
JSON
.