Buffer Overflow Vulnerability in Sante DICOM Viewer Pro by Sante

CVE-2022-24064

What is CVE-2022-24064?

A buffer overflow vulnerability affects Sante DICOM Viewer Pro 11.8.8.0, allowing remote attackers to execute arbitrary code by sending crafted J2K images. Successful exploitation requires user interaction, where a target must open a malicious file or visit an affected page. The issue lies in the improper handling of data in J2K files, which can lead to a write past the end of an allocated buffer, enabling attackers to execute code within the context of the affected process. Ensure that your systems are updated to mitigate the risk associated with this vulnerability.

References