Sante DICOM Viewer Pro J2K File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2023-32133

What is CVE-2023-32133?

Sante DICOM Viewer Pro is susceptible to a vulnerability that arises from improper handling of J2K image files. Maliciously crafted J2K data can cause the application to write beyond allocated buffer limits, opening the door for remote attackers to execute arbitrary code within the context of the application. For exploitation to succeed, user interaction is necessary, which typically involves visiting a malicious site or opening a compromised file. The flaw highlights the importance of implementing robust validation mechanisms to prevent such exploits.

References