Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2023-32132

What is CVE-2023-32132?

A vulnerability exists in Sante DICOM Viewer Pro related to the parsing of DCM image files. Maliciously crafted DCM data may lead to an out-of-bounds write, permitting remote attackers to execute arbitrary code on user systems if they interact with malicious content. Successful exploitation requires that the user either visits a compromised web page or opens a specially crafted DCM file, leading to potential system compromise. Mitigation involves enforcing strict validation on incoming DCM files and ensuring users are educated about safe browsing practices.

References