Buffer Overflow Vulnerability in Sante DICOM Viewer Pro by Sante
CVE-2022-24064

7.8HIGH

Key Information:

Vendor

Sante

Status
Dicom Viewer Pro
Vendor
CVE Published:
18 February 2022

What is CVE-2022-24064?

A buffer overflow vulnerability affects Sante DICOM Viewer Pro 11.8.8.0, allowing remote attackers to execute arbitrary code by sending crafted J2K images. Successful exploitation requires user interaction, where a target must open a malicious file or visit an affected page. The issue lies in the improper handling of data in J2K files, which can lead to a write past the end of an allocated buffer, enabling attackers to execute code within the context of the affected process. Ensure that your systems are updated to mitigate the risk associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

DICOM Viewer Pro 11.8.8.0

References

https://www.zerodayinitiative.com/advisories/ZDI-22-256/
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tran Van Khang - khangkito (VinCSS)
JSON
.