Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability

CVE-2023-35734

What is CVE-2023-35734?

A vulnerability exists in the Sante DICOM Viewer Pro that affects how DCM files are parsed. Specifically, this vulnerability arises from the application's failure to validate the existence of an object before performing operations on it, leading to a use-after-free condition. As a result, remote attackers can exploit this flaw to disclose sensitive information on affected installations. This exploitation generally requires user interaction, whereby the targeted user must open a malicious file or visit a harmful webpage. Additionally, this vulnerability can be combined with other weaknesses to enable the execution of arbitrary code within the context of the affected process.

References