Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability

CVE-2023-34294

What is CVE-2023-34294?

The vulnerability in Sante DICOM Viewer Pro stems from improper handling of DCM file parsing, leading to a use-after-free condition. This flaw permits remote attackers to exploit the application by enticing users to interact with a malicious web page or file. The vulnerability allows attackers to potentially disclose sensitive information due to the program's failure to validate the existence of objects prior to execution. This weakness could further enable exploitation in combination with other vulnerabilities, facilitating arbitrary code execution in the context of the affected process.

References