Skip to content
OpenAdvisories
High ICSMA-23-285-01 2 CVEs

Santesoft Sante DICOM Viewer Pro

Published Oct 12, 2023 · Updated Oct 12, 2023

Vendor: Santesoft Product: Sante DICOM Viewer Pro

Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code.

Vulnerabilities 2

  • High 7.8
    CVE-2023-35986

    Santesoft Sante DICOM Viewer Pro Stack-based Buffer Overflow

    Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files. This could lead to a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.

    Santesoft Sante DICOM Viewer Pro
  • High 7.8
    CVE-2023-39431

    Santesoft Sante DICOM Viewer Pro Out-of-bounds Write

    Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.

    Santesoft Sante DICOM Viewer Pro

Revision history

  1. #1

    Initial Publication

References